-------- Original Message --------
Subject:        OOT: Virus Blackmal.e
Date:   Wed, 18 Jan 2006 13:10:13 +0800
From:   Rinto Jiang
To:     Milis Budaya Tionghoa <[email protected]>



Hati2, karena sudah menyebar di beberapa milis. Selengkapnya bisa 
dilihat di sini:

http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]

----------------------------------------------------------

Attempts to send itself as an email to the addresses it gathers using 
its own SMTP engine. The email will have the following characteristics:

*Subject:*
One of the following:

    * *Hot Movie*
    * A Great Video
    * Fw:
    * Fw: DSC-00465.jpg
    * Fw: Funny :)
    * Fw: Picturs
    * Fw: Real show
    * Fw: SeX.mpg
    * Fw: Sexy
    * Fwd: Crazy illegal Sex!
    * Fwd: image.jpg
    * Fwd: Photo
    * give me a kiss
    * Miss Lebanon 2006
    * My photos
    * Part 1 of 6 Video clipe
    * Photos
    * Re:
    * School girl fantasies gone bad

      *Message body:*
      One of the following:

    * Note: forwarded message attached. You Must View This Videoclip!
    *  >> forwarded message
    * Re: Sex Video
    * i just any one see my photos.
    * It's Free :)
    * The Best Videoclip Ever
    * Hot XXX Yahoo Groups
    * Fuckin Kama Sutra pics
    * ready to be FUCKED ;)
    * forwarded message attached.
    * VIDEOS! FREE! (US$ 0,00)
    * What?
    * i send the file.
    * Helloi attached the details.
    * Thank you
    * the file i send the details
    * hello,
    * Please see the file.
    * how are you?
    * i send the details.

      *Attachment:*
      One of the following:

    * 007.pif
    * 392315089702606E-02,.scR
    * 677.pif
    * Adults_9,zip.sCR
    * Arab sex DSC-00465.jpg
    * ATT01.zip.sCR
    * Attachments[001],B64.sCr
    * Clipe,zip.sCr
    * document.pif
    * DSC-00465.Pif
    * DSC-00465.pIf
    * eBook.pdf
    * eBook.PIF
    * image04.pif
    * New Video,zip
    * New_Document_file.pif
    * photo.pif
    * Photos,zip.sCR
    * School.pif
    * SeX,zip.scR
    * Sex.mim
    * Video_part.mim
    * WinZip,zip.scR
    * WinZip.BHX
    * WinZip.zip.sCR
    * Word XP.zip.sCR
    * Word.zip.sCR
    * 04.pif
    * DSC-00465.Pif
    * DSC-00465.pIf
    * image04.pif

      The attachment may be an executable file or a MIME file that
      contains an executable file. Those attachments that are MIME files
      may have the following file names:

    * 3.92315089702606E02.UUE
    * Attachments[001].B64
    * Attachments00.HQX
    * Attachments001.BHX
    * eBook.Uu
    * Original Message.B64
    * Sex.mim
    * SeX.mim
    * Video_part.mim
    * WinZip.BHX
    * Word_Document.hqx
    * Word_Document.uu

      These files may also have one the following file names:

    * 392315089702606E-02
    * Clipe
    * Miss
    * Photos
    * Sweet_09

      These file names will be combined with one of the following
      extensions:

    * .b64
    * .BHx
    * .HQX
    * .mim
    * .uu
    * .UUE
    * .XxE

      If the attachment is a MIME file, it may contain a file with one
      of the following file names:

    * 392315089702606E-02,UUE[BLANK SPACES].scr
    * Adults_9,zip[BLANK SPACES].scr
    * ATT01.zip[BLANK SPACES].scr
    * Atta[001],zip[BLANK SPACES].scr
    * Attachments,zip[BLANK SPACES].scr
    * Attachments[001],B64[BLANK SPACES].scr
    * Clipe,zip[BLANK SPACES].scr
    * New Video,zip[BLANK SPACES].scr
    * Photos,zip[BLANK SPACES].scr
    * SeX,zip[BLANK SPACES].scr
    * WinZip,zip[BLANK SPACES].scr
    * WinZip.zip[BLANK SPACES].scr
    * Word XP.zip[BLANK SPACES].scr
    * Word.zip[BLANK SPACES].scr



[Non-text portions of this message have been removed]



------------------------ Yahoo! Groups Sponsor --------------------~--> 
Join modern day disciples reach the disfigured and poor with hope and healing
http://us.click.yahoo.com/lMct6A/Vp3LAA/i1hLAA/b0VolB/TM
--------------------------------------------------------------------~-> 

** MABINDO - Forum Diskusi Masyarakat Buddhis Indonesia **

** Kunjungi juga website global Mabindo di http://www.mabindo.org ** 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/MABINDO/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 



Kirim email ke