I just blocked another new virus at our gateway that Symantec does not yet
detect. This one is about twice the size of novarg and the executable is
totally different. Here is a snippet of the beginning of it.
Tom
SUBJECT: He played what seemed.
X-MSMail-Priority: Normal
X-Priority: 3
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00A5_015D9846.9E9846A0"
Content-Transfer-Encoding: 7bit
To: undisclosed-recipients:;
X-Envfrom: [EMAIL PROTECTED]
X-Xmap: EXE - Executable attachment detected
X-Bayes: 0.000000 0.442441
This is a multi-part message in MIME format.
------=_NextPart_000_00A5_015D9846.9E9846A0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
The wedding started late(half hour after the original time set of
7:PM)..most
people sitting in the "cathedral room" of the Antiquated(old) ICE House of
Phoenix were talking as various elements of people were coming in to the
room,
some also went outside, then came back before the ceremony began. Over 100
people seem to be in the chairs provided about 5060 on each side. I somewhat
knew this Marriage ceremony was going to be special because a lot of the
members
of the audience were in "costumes"(not suits and summer style dresses) so
it
was not unlike going to a Halloween party let alone a marriage event and
seeing
these costumes.
------=_NextPart_000_00A5_015D9846.9E9846A0
Content-Type: application/octet-stream; name="minutesnof.bat"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="minutesnof.bat"
TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAgAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
ZGUuDQ0KJAAAAAAAAABQRQAATAEFABhA4jMAAAAA1cMAAOAADwELAQUAAC4AAAA8AAAAAAAAQBgA
Etc. etc. etc.....
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
