FYI - Steve (in Memphis)
 
----- Original Message -----
Sent: Tuesday, January 27, 2004 10:37 AM
Subject: Details about the latest worm

The From: may be a spoofed from an address in your inbox.

The Subject may say:
(one of the following)
test
hi
hello
Mail Delivery System
Mail Transaction Failed
Server Report
Status
Error

The message:
(one of the following)
Mail transaction failed. Partial message is available.
The message contains Unicode characters and has been sent as a binary attachment.
The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment.

The attached file might have the following filenames:
(one of the following)
document
readme
doc
text
file
data
test
message
body


--------------------------------------------------------------------------------
Notes:
The attachment may have two suffixes. If so, the first suffix will be one of the following:
.htm
.txt
.doc

The worm will always end with one of the following suffixes:
.pif
.scr
.exe
.cmd
.bat
.zip

_________________________________________________________________
If you see any of the above characteristics in an email message, please delete it.  If you have been infected or suspect it, please email [EMAIL PROTECTED]
thanks
Ramsan


Reply via email to