Oracle-L: RE: finding pasword emails. Virus ???

From: Seefelt, Beth <Beth.Seefelt_at_TetleyUSA.com>
Date: Thu, 18 Jul 2002 13:36:40 -0800
Message-ID: <F001.0049C019.20020718133640@fatcity.com>

I have gotten one also. It appears to be some type of attempted virus. Its an html message that attempts to execute an attachment as an application. The attachment is called password.txt, I assume to fool the email filters. As far as I can tell, it didn't work on my machine, and I did a search through Symantec's web site for the signature, but didn't find one. If anyone knows what to look for to tell if the virus did anthing, I'd appreciate the info.

Beth

-----Original Message-----

Sent: Thursday, July 18, 2002 5:14 PM
To: Multiple recipients of list ORACLE-L

Hello list,

I'm getting many "finding pasword" emails from non-registered users. have you got this type of email ? is it a spam or virus ?

regards...

--

Danisment Gazi Unal
http://www.ubTools.com

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Danisment Gazi Unal (ubTools)
INET: dunal_at_ubTools.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists


--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Seefelt, Beth
INET: Beth.Seefelt_at_TetleyUSA.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists


--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message