Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Incidents
[Top] [All Lists]

RE: New MSN worm?

Subject: RE: New MSN worm?
Date: Tue, 15 Feb 2005 15:01:45 -0600
Did a little looking around, apparently this is tied to the Bropia-A 
worm. Heres a link:
http://wickedzonenews.blogdrive.com/

Looks to only infect once a person runs the file, but if anyone has seen 
this first hand otherwise let us know.

-Felix
-----Original Message-----
From: magnus.tornekrona [mailto:magnus.tornekrona@cleric.se]
Sent: Tuesday, February 15, 2005 2:21 PM
To: incidents
Subject: New MSN worm?


Just arrived home, had four persons on my MSN contact list who had sent 
me the following messages:
"LOOK! http://members.chello.nl/g.geurts1/handcuffs.pif " (with 
':O'-smiley at the end.)
"LMFAO! http://members.chello.nl/g.geurts1/handcuffs.pif " (with 
':P'-smiley at the end.)
"rofl! http://members.chello.nl/g.geurts1/handcuffs.pif " (with 
':D'-smiley at the end.)

I tried to wget the file, but got a 404. chello.nl has probably already 
dealt with the problem,
at least on their own servers, but you can never be sure...
Thus, I haven't been able to get the .pif and try to disassemble it or 
check the contents,
and after a quick googling I haven't found anything that matches this 
new (?) virus/worm.

Anyone else knows about this and if there's any spyware remover / 
antivirus that fixes the problem?

Regards,
Magnus Törnekrona

<Prev in Thread] Current Thread [Next in Thread>