[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

RE: foto - VIRUS

• To: <JKoh@c...>,"Pam" <pam@e...>
• Subject: RE: foto - VIRUS
• From: "Jim Garrett" <jgarrett@n...>
• Date: Wed, 1 Sep 2004 06:47:36 -0500
• Cc: "Xml-dev" <xml-dev@l...>
• Importance: Normal
• In-reply-to: <OF8960B05F.EF6D919E-ONCA256F01.0081A051-CA256F01.0081BC47@c...>
• Reply-to: <jgarrett@n...>

FYI -
The zip contains
calc.exe
foto.htm

calc.exe contains
Download.Ject.C
http://sarc.com/avcenter/venc/data/download.ject.c.html

Discovered on: August 27, 2004
Last Updated on: September 01, 2004 11:11:31 AM


Download.Ject.C is a variant of Download.Ject that attempts to
 download and execute files by exploiting two vulnerabilities
in Internet Explorer (described in Microsoft Security Bulletin MS04-013).

The Trojan is triggered by opening an email that contains the exploit HTML
code.



Variants:  Download.Ject, Download.Ject.B
Type:  Trojan Horse




Systems Affected:  Windows 2000, Windows 95, Windows 98, Windows Me, Windows
NT, Windows Server 2003, Windows XP
Systems Not Affected:  DOS, Linux, Macintosh, Novell Netware, OS/2, UNIX,
Windows 3.x




-----Original Message-----
From: JKoh@c... [mailto:JKoh@c...]
Sent: Tuesday, August 31, 2004 6:37 PM
To: Pam
Cc: Xml-dev
Subject: Re:  foto



I think there might be a virus in the attachment going around in Pam's (
pam@e...) and Jeni's (jeni@j...)



                      "Pam"
                      <pam@empoweringyo        To:       "Xml-dev"
<xml-dev@l...>
                      u.com>                   cc:
                                               Subject:   foto
                      01/09/2004 09:24
                      AM






----------------------------------------------------------------
The xml-dev list is sponsored by XML.org <http://www.xml.org>, an
initiative of OASIS <http://www.oasis-open.org>

The list archives are at http://lists.xml.org/archives/xml-dev/

To subscribe or unsubscribe from this list use the subscription
manager: <http://www.oasis-open.org/mlmanage/index.php>





-----------------------------------------------------------------
The xml-dev list is sponsored by XML.org <http://www.xml.org>, an
initiative of OASIS <http://www.oasis-open.org>

The list archives are at http://lists.xml.org/archives/xml-dev/

To subscribe or unsubscribe from this list use the subscription
manager: <http://www.oasis-open.org/mlmanage/index.php>

• Prev by Date: Re: Newbie looking for starting point
• Next by Date: Re: Newbie looking for starting point
• Previous by thread: Re: Newbie looking for starting point
• Next by thread: xml web uses
• Index(es):
  • Date
  • Thread