Vulnerability Development mailing list archives

Re: Another new worm???


From: frank_smiles () HOTMAIL COM (Frank Town)
Date: Wed, 21 Jun 2000 14:18:11 GMT


Actully not to say everyone is wrong but about 5 years ago when i used to
hang out on aol, we made these things called password stealers or pws and
they can come in the extentions .shs .exe .txt .zip what they do basically
if you cant figure it out is steal your password or log it everytime you
sign on to aol and send it to the makers e-mail address. They are simple to
get rid of, at least they were im nto sure about now. Most just add a line
to your win.ini in the run line you will see the path of the trojan you can
delete that and then go and delete the trojan. I may be wrong but thats all
this sounds like but i could be wrong :o).
Have fun,
Frank

From: Studio1057 () AOL COM
Reply-To: Studio1057 () AOL COM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Another new worm???
Date: Mon, 19 Jun 2000 09:49:54 EDT

Hello all,

This morning I am getting a lot of mail with attachments. Trends are:
No from and to appears in the header
Attachments have .SHS extension (??!!)
the subject is either :Jokes", or "Funny: Jokes text", or "Life stages".
Funny text does not show the attachment. The rest are .txt.shs extensions,
the filename is the subject line but in all caps.
Any ideas? I am planning to clip a copy of all the "variations" I'm getting
to check out what is going on. Unless of course somebody else has already
done so in which case I am anxiously awaiting what you guys cme up with.

Thanks,

LK

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com


Current thread: