[sdiy] Re: Snowhite and the Seven Dwarfs - The REAL story!

[Drew Smith]

"J. Larry Hendry" wrote:
> 
> I don't know if me getting this was associated to any of the lists I belong
> to, but I got a mail under this category with a very suspicious looking .exe
> file attached, and the sending address is invalid.  I do not like to pass
> "virus" warnings.  But, this doesn't look friendly.  However, I am, so this
> is a friendly caution.

	Heya folks,

	There's information about the trojan and exactly what it does to your
system available at http://www.sexyfun.net - the emails are coming from
a spoofed address.  The trojan itself is another one of those stupid
Outlook worms - it opens your address list, then uses YOUR computer to
send forged email to everyone on your list.  If you've gotten it 20+
times in one day, then count yourself lucky, you've got a reasonably
large, tight-knit group of friends!

	Mailserver admins - why are your mailservers still accepting executable
attachments?  .exe, .com, .bat, .vbs, .scr - any mail with those kinds
of attachments should be bounced with a message telling the sender
exactly *why* - a few of these trojans don't let you know anything is
wrong, but attach themselves to the bottom of all outgoing mail...

	Fun stuff.  *sigh*.

	Cheers,
	- Drew.


--
Drew Smith, UNIX Network Administrator
Pacific Corporate Trust Company, Vancouver