[Full-Disclosure] A worm...

[ATD]

Morning, 
	Nice talking to you again, what virus scanner are you using?

On Thu, 2003-06-26 at 10:27, morning_wood wrote:
> i got 4 of these now, running XP and OE none had opened, I dont see
> this exploding .zip thing..
> 
> info for my "letters"
> both contain "your_details.zip" with "details.pif" as the content
> 
> 
> mail 1:
> 
> Received: from unknown (HELO mail.dnsvr.com) (192.197.108.101)
>   by hosting-132-36.phpwebhosting.com with SMTP; 26 Jun 2003
> 13:56:08 -0000
> Received: from HELPDESK01 (unknown [146.229.4.30])
>  by mail.dnsvr.com (Postfix) with ESMTP id 39AEC1D6FB8
>  for <0daylist at exploitlabs.com>; Thu, 26 Jun 2003 09:55:51 -0400 (EDT)
> From: <pets101z at aol.com>
> To: <0daylist at exploitlabs.com>
> 
> 
> mail 2:
> 
> Received: from unknown (HELO mail.dnsvr.com) (192.197.108.101)
>   by hosting-132-36.phpwebhosting.com with SMTP; 26 Jun 2003
> 13:56:26 -0000
> Received: from HELPDESK01 (unknown [146.229.4.30])
>  by mail.dnsvr.com (Postfix) with ESMTP id A97C91D6F6B
>  for <morning_wood at exploitlabs.com>; Thu, 26 Jun 2003 09:56:05 -0400
> (EDT)
> From: <floyds at email.uah.edu>
> To: <morning_wood at exploitlabs.com>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030626/68c6c7cc/attachment.bin