or the WORM_MIMAIL.R virus, (same virus as the novarg from symantec with differentn aming I believe)
 
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Tracey Maule
Sent: Wednesday, 28 January 2004 2:39 p.m.
To: NZ Borland Developers Group - Delphi List
Subject: Re: [DUG]

or  [EMAIL PROTECTED], I-Worm.Bagle, WORM_BAGLE.A
 
Traits:

This worm spreads via e-mail and has a random filename, with an .exe extension.  The worm uses its own SMTP engine to send itself to e-mail addresses found on the infected machine.  The worm spoofs the "From" field in emails it sends, which means that it may appear to have come from someone you know.

The message appears as follows:

***********************************************************

Subject line: Hi

Message text:
Test =)
[random characters]
--
Test, yep.

Attached file: <random name>.exe



----- Original Message -----
Sent: Wednesday, January 28, 2004 2:18 PM
Subject: RE: [DUG]

Errr....
 
MyDoom/Novarg virus?
 


From: Ross Levis [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 28, 2004 2:11 PM
To: NZ Borland Developers Group - Delphi List
Subject: [DUG]

Is everyone getting lots of returned undeliverable mail today from messages supposedly sent from your email address?
 
Ross.


_______________________________________________
Delphi mailing list
[EMAIL PROTECTED]
http://ns3.123.co.nz/mailman/listinfo/delphi


______________________________________________________
The contents of this e-mail are privileged and/or confidential to the
named recipient and are not to be used by any other person and/or
organisation. If you have received this e-mail in error, please notify
the sender and delete all material pertaining to this e-mail.
______________________________________________________
_______________________________________________
Delphi mailing list
[EMAIL PROTECTED]
http://ns3.123.co.nz/mailman/listinfo/delphi

Reply via email to