RE: HEADS UP VIRUS BEING SPREAD one of our readers infected?

["Steve Manzuik" <steve () entrenchtech com>]

No but not reading or comprehending a post should be.  If you took a second
to breath and use your brain instead of freaking out over the apparent
"virus" you would have noticed that the subject line of the message your oh
so great filter rejected had the words "VIRUS ATTACHED" to it.  I am
grateful for the poster for sharing the virus -- its fun to rip these things
apart yourself and compare results.

This list isn't moderated so expect this kind of stuff to be posted.  Funny,
when you go to your company web site you have the following words in your
marketing blurb;

"Does your SECURITY SOLUTION Continue To Cry Wolf?  We stop real attacks
...for you."

Ironic isn't it.  

> Message: 2
> Date: Sat, 24 May 2003 14:51:41 -0400
> From: <scheidell () secnap net>
> To: <full-disclosure () lists netsys com>
> Subject: [Full-disclosure] HEADS UP VIRUS BEING SPREAD one of 
> our readers infected?
>
> so, should being infected with a virus, or attempting to 
> infect others be grounds for automatic unsubscribing?
>
> did a google for update880.exe, found nothing yet.
>
> TZ eastern.
>
> May 24 14:46:15 Solaris postfix/cleanup[1398]: [ID 197553 
> mail.info] DB90F38111: reject: header Content-Type: 
> application/x-msdownload;??name="Update880.exe" from 
> NETSYS.COM[199.201.233.10]; 
> from=<full-disclosure-admin () lists netsys com> 
> to=<scheidell () secnap net> proto=ESMTP helo=<netsys.com>: 550 
> 5.7.2 Possible Virus attachment. email rejected
>
>
> -- 
> Michael  S. Scheidell, CEO
> SECNAP Network Security www.secnap.com
> scheidell () secnap net  / 1+561.368.9561, 1131
> Sales: 866-SECNAPNET / 866.732.6276

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html