I think this is bagle.n no ? Both NAI and f-prot see it as that.
---Mike
At 10:22 PM 31/03/2004, Alerta Redsegura wrote:
Interesting one. Kaspersky antivirus says it is "bvblpiewo.exe Suspicion: PSW-Worm".
Supposing the message was automatically generated and not manually crafted, the bmp-contained password is an interesting feature.
I�igo Koch redsegura.com
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nombre de [EMAIL PROTECTED]
Enviado el: mi�rcoles 31 de marzo de 2004 22:18
Para: [EMAIL PROTECTED]
Asunto: [Full-Disclosure] Encrypted document
Please, have a look at the attached file.
In order to read the attach you have to use the following password: 6921caf.bmp
6921caf.bmp
Description: Binary data
