[IP] NOTE THE MESSAGE IS FROM GALLER NOT FROM THE IP LIST SERVER. -- virus sent as IP message

[Dave Farber <dave@farber.net>]

------ Forwarded Message
From: Alexandros Papadopoulos <apapadop@cmu.edu>
Date: Tue, 10 Jun 2003 01:03:25 +0000
To: dave@farber.net
Subject: virus sent as IP message

Hi Dave - hope you're doing well.

I received an email that looks like an IP posting (Subject: [i-p] [IP]
more on Winston Churchill on Iraq), with an attachment that seems like
a virus (.scr, hence M$ executable) from galler@umich.edu :

Message-Id: <200306091930.h59JUET29405@harumscarum.mr.itd.umich.edu>

It seems to use/masquerade as/infect the following DLLs: (just ran
"strings" on the file)

KERNEL32.DLL
ADVAPI32.dll
MPR.dll
MSVCRT.dll
USER32.dll
WSOCK32.dll

You might want to alert the troops. :-)

Cheers

-A
-- 
http://andrew.cmu.edu/~apapadop/pub_key.asc
3DAD 8435 DB52 F17B 640F  D78C 8260 0CC1 0B75 8265


------ End of Forwarded Message

-------------------------------------
To manage your subscription, go to
  http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/