From: Richard Knoppow (dickburk@ix.netcom.com)
Date: 11/29/01-12:15:45 AM Z
At 10:50 PM 11/28/2001 -0600, you wrote:
> Good Evening, all— Earlier tonight I received what
>appeared to be an off-list response to one of my on-list posts from
>nicholasphoto [_lorenzen@hawksnet.net]. There was no text in the
>post—and a program unsuccessfully attempted to open my media player.
>I replied with a request that the post be re-sent, and got a “user
>unknown” Mailer-Daemon failure response. Anyone else had similar
>experience? Or know of nicholasphoto [_lorenzen@hawksnet.net]? Or know
>of a new viral agent that poses this way? Thanks! And I hope all of
>you are well. --John http://www.photogecko.com/
This appears to be a form of the PE Nimda virus or worm. It appears as
an attachment in an otherwise empty message and appears to be an audio
file. It is automatically excecuted by Microsoft Outlook.
Details are on the various anti-virus web sites such as
http://www.antivirus.com
This has a link to Microsoft's security bulletin.
I've gotten several of these in the last couple of days.
It modifies the "From" field to put a _ in front of the e-mail address.
Remove the _ to reply to the sender.
---- Richard Knoppow Los Angeles, CA, USA dickburk@ix.netcom.com
This archive was generated by hypermail 2b30 : 12/10/01-11:12:22 AM Z CST