Re: FBI Virus Alerts

From: info (info@safer-hex.com)
Date: 09/28/01


Message-Id: <a05101000b7d9cb029a2f@[192.168.1.13]>
Date: Fri, 28 Sep 2001 08:38:07 +0200
To: twistsiwt@hushmail.com
From: info <info@safer-hex.com>
Subject: Re: FBI Virus Alerts

Also sprach twistsiwt@hushmail.com um 17:03 Uhr +0000 am 27.09.2001:
>(...) He said that the FBI
>have just finnished a meeting with many of the major software vendors
>regarding a flood of new Terrorist related viruses about to be released in
>the next couple of hours. (...)

2001/9/27

17:21 GMT +0100

>>> W32/Vote-B / TROJ_VOTE.C

[Viruses & Worms] Sophos and Trend Micro report a "severe outbreak"
of a variant of day before yesterday's W32/Vote-A alias
Win32.Vote.A@mm, W32.Vote.A@mm, that deletes files from infected hard
drives.

It arrives in an email with the subject line Fwd: This War Must Be
Done ! The body of the email contains the text Hi We Must Fight , We
Must ReMemBer Our Victims! No Peace Before KiLLing TeRRoRists ! The
worm will be attached as the file ANTI_TERRORISM.EXE.

This variant works basically like its predecessor, just different
file names are being used and other messages are being displayed. ::
[dre].

Please see the references and further links online on http://www.safer-hex.com

-- 

[ C A M R I N N E T W O R K ] the jrpamc.com internet information services [jrpamc@camrin.net] : [http://www.camrin.net]

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com