Re: LOLOLOL Hey CJ what we were talking about..

From: ThePsyko (thepsyko@itookmyprozac.com)
Date: 05/07/02 

From: ThePsyko <thepsyko@itookmyprozac.com>
Date: Tue, 07 May 2002 05:11:20 GMT

On 06 May 2002 in that fucked up hellhole known as
comp.security.firewalls, an identity claiming to be stardust spewed
forth news:Xns92065BFB9C3A7jherrellroadrunnernf@12.252.202.62:

> ThePsyko wrote:
>
>> I just got this in my email
>>
>>
>> ****begin cut and paste****
>>
>> Klez.E is the most common world-wide spreading worm.It's very
>> dangerous by corrupting your files.
>> Because of its very smart stealth and anti-anti-virus technic,most
>> common AV software can't detect or clean it.
>> We developed this free immunity tool to defeat the malicious virus.
>> You only need to run this tool once,and then Klez will never come
>> into your PC.
>> NOTE: Because this tool acts as a fake Klez to fool the real
>> worm,some AV monitor maybe cry when you run it.
>> If so,Ignore the warning,and select 'continue'.
>> If you have any question,please mail to me.
>>
>> ATTACHMENTS:
>> 1 Name: Hygiene.bat | Type: application/octet-stream | Size: 90k
>> Hygiene.bat
>>
>> 2 Name: DHApp.html | Type: application/octet-stream | Size: 1k
>> DHApp.html
>>
>
> This is a variation of klez.h. Check McAfee's info at this link:
>
> http://vil.nai.com/vil/content/v_99455.htm
>
> Because it's klez, the "From" address is most certainly fake (having
> been harvested from one list or another on another person's infected
> computer). Replying to this address (or forwarding the email back to
> him, etc.) is useless....because the address does not belong to the
> real sender. In fact, the "From" address is most often an innocent
> bystander who has no idea that his/her email address has been used in
> this manner.
>
> stardust
>

I received another one today.. different subject for the email, different
name for the html doc and different name on the .bat file but originating
from the same system 

-- 
ThePsyko
Public Enemy #7
"God told me to skin you alive"

http://prozac.iscool.net

Quantcast