RE: Please tell me I'm wrong: microsoft.com infected

From: Craig Humphrey (craig.humphrey@chapmantripp.co.nz)
Date: 09/20/01


Message-ID: <3D6694DB1788D311BA3E00508B5DFFE702D45F01@aklmessage01>
From: Craig Humphrey <craig.humphrey@chapmantripp.co.nz>
To: 'Steve Cody' <security@gulbrandsen.com>, incidents@securityfocus.com
Subject: RE: Please tell me I'm wrong:  microsoft.com infected
Date: Thu, 20 Sep 2001 10:22:34 +1200

Yup. It's sitting there at the bottom of the source code for that page.
But instead of McAfee picking it up, I get a browser opening looking for
"http://www.microsoft.com/frontpage/readme.eml" which wasn't found.

> -----Original Message-----
> From: Steve Cody [mailto:security@gulbrandsen.com]
> Sent: Thursday, September 20, 2001 7:38 AM
> To: incidents@securityfocus.com
> Subject: Please tell me I'm wrong: microsoft.com infected
>
>
> I just went to http://www.microsoft.com/frontpage, and my Symantec
> Norton Antivirus popped up and denied access to readme.eml.
>
> I could not view the source of the loaded page, so I can't verify that
> it is definitely infected.
>
> Steve
>
>
> --------------------------------------------------------------
> --------------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management
> and tracking system please see: http://aris.securityfocus.com
>

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com



Relevant Pages