Re: 543.rar attachment

From: Andrew Pretzl (arp_at_norlight.com)
Date: 03/04/05

  • Next message: Alan Apperson: "Re: 543.rar attachment" 
    To: "Ju Ne" <ddjjembe1@hotmail.com>
Date: Fri, 4 Mar 2005 13:18:29 -0600

    The dddd.exe file is some manner of malware (spyware I believe). The
    543.rar is probably some random name chosen to try to disguise the dddd.exe
    payload.
    AP
    -
    =============================
    Andrew Pretzl - CISSP
    Security Administrator
    Norlight Telecommunications
    http://www.norlight.com
    =============================
    "Quis custodiet ipsos custodes?"


                                                                                                                                           
                          "Ju Ne"
                          <ddjjembe1@hotmai To: security-basics@securityfocus.com
                          l.com> cc: (bcc: Andrew Pretzl/Brookfield/Norlight)
                                                   Fax to:
                          03/04/2005 11:12 Subject: 543.rar attachment
                          AM
                                                                                                                                           
                                                                                                                                           




    We have been receiving an influx of emails that contained an attachment
    called 543.rar. Inside this .rar is an executable called dddd.exe. Does
    anyone know more information about this executable?

    june

    _________________________________________________________________
    Don’t just search. Find. Check out the new MSN Search!
    http://search.msn.click-url.com/go/onm00200636ave/direct/01/


  • Next message: Alan Apperson: "Re: 543.rar attachment"