-Caveat Lector-
------- Start of forwarded message -------
From: [EMAIL PROTECTED]
To: "VirusEye Subscriber" <[EMAIL PROTECTED]>
Subject: Fwd: WARNING: New virus variant - W32/LovGate.F-m
Date: 3/24/2003 6:42:07 AM
24 Mar 2003 - W32/LovGate.F-m
General
The details of the new virus are as follows (as at 1200 GMT, 24th Mar 2003):
Virus name: W32/LovGate.F-m
Number of copies seen so far: 15
Date first Captured: 23th Mar 2003, 14:09 GMT
Origin of first intercepted copy: South Korea
Number of countries seen active: 2
Most active countries: Germany, South Korea
Technical Details
On 23th March 2003, MessageLabs stopped several copies of a new variant
of the LovGate virus. Initial analysis suggests that this is a mass-mailing virus
that incorporates an SMTP engine, and may be able to spread via network
shares as well as email.
Once activated, the virus appears to reply to any emails it finds in the
recipient’s in-box, attaching itself to the reply.
>From the copies that MessageLabs have intercepted, the email may be
composed as follows:
Subject names appear to be based on existing emails that are in reply,
and therefore random.
The file attachment is written in Microsoft Visual C/C++ and is
compressed using ASPack and is 107,008 bytes in size.
Attachment file names may include:
Are you looking for Love.doc.exe
autoexec.bat
The world of lovers.txt.exe
How To Hack Websites.exe
Panda Titanium Crack.zip.exe
Mafia Trainer!!!.exe
100 free essays school.pif
AN-YOU-SUCK-IT.txt.pif
Sex_For_You_Life.JPG.pif
CloneCD + crack.exe
Age of empires 2 crack.exe
MoviezChannelsInstaler.exe
Star Wars II Movie Full Downloader.exe
Winrar + crack.exe
SIMS FullDownloader.zip.exe
MSN Password Hacker and Stealer.exe
The body-text of the email may also include including the following text,
which is also appended to the email reply:
----------------------------------------------------------------------------
<sender's domain> account auto-reply:
If you can keep your head when all about you
Are losing theirs and blaming it on you;
If you can trust yourself when all men doubt you,
But make allowance for their doubting too;
If you can wait and not be tired by waiting,
Or, being lied about,don't deal in lies,
Or, being hated, don't give way to hating,
And yet don't look too good, nor talk too wise;
... ... more look to the attachment.
> Get your FREE <sender's domain> account now! <
----------------------------------------------------------------------------
Detection
Skeptic™ intercepted W32/LovGate.F-m heuristically.
For the latest information in this virus, please visit:
http://www.messagelabs.com/viruseye/report.asp?id=136
This email was sent to you because you subscribe to MessageLabs' Virus
Alert service. You can cancel your subscription on the MessageLabs
website at http://www.messagelabs.com/AlertUnsubscribe
MessageLabs is a leading provider of Internet-level managed email security
services. Through its SkyScan portfolio of services, MessageLabs customers
are protected from email-borne threats such as viruses, unsolicited mail
and pornographic material, before such content comes anywhere near
their network boundaries.
______________________________________________________________________
__
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
______________________________________________________________________
__
-------- End of forwarded message --------
Forwarded for your information. The text and intent of the article
have to stand on their own merits.
~~~~~~~~~~~~~~~~~~~~
In accordance with Title 17 U.S.C. section 107, this material
is distributed without charge or profit to those who have
expressed a prior interest in receiving this type of information
for non-profit research and educational purposes only.
~~~~~~~~~~~~~~~~~~~~
"Do not believe in anything simply because you have heard it. Do
not believe simply because it has been handed down for many genera-
tions. Do not believe in anything simply because it is spoken and
rumoured by many. Do not believe in anything simply because it is
written in Holy Scriptures. Do not believe in anything merely on
the authority of teachers, elders or wise men. Believe only after
careful observation and analysis, when you find that it agrees with
reason and is conducive to the good and benefit of one and all.
Then accept it and live up to it." The Buddha on Belief,
from the Kalama Sutra
<A HREF="http://www.ctrl.org/";>www.ctrl.org</A>
DECLARATION & DISCLAIMER
==========
CTRL is a discussion & informational exchange list. Proselytizing propagandic
screeds are unwelcomed. Substance—not soap-boxing—please! These are
sordid matters and 'conspiracy theory'—with its many half-truths, mis-
directions and outright frauds—is used politically by different groups with
major and minor effects spread throughout the spectrum of time and thought.
That being said, CTRLgives no endorsement to the validity of posts, and
always suggests to readers; be wary of what you read. CTRL gives no
credence to Holocaust denial and nazi's need not apply.
Let us please be civil and as always, Caveat Lector.
========================================================================
Archives Available at:
http://peach.ease.lsoft.com/archives/ctrl.html
<A HREF="http://peach.ease.lsoft.com/archives/ctrl.html";>Archives of
[EMAIL PROTECTED]</A>
http://archive.jab.org/[EMAIL PROTECTED]/
<A HREF="http://archive.jab.org/[EMAIL PROTECTED]/">ctrl</A>
========================================================================
To subscribe to Conspiracy Theory Research List[CTRL] send email:
SUBSCRIBE CTRL [to:] [EMAIL PROTECTED]
To UNsubscribe to Conspiracy Theory Research List[CTRL] send email:
SIGNOFF CTRL [to:] [EMAIL PROTECTED]
Om
