[TriLUG] [OT] Sys admin heads up

[David A. Cafaro]

Looks like a variant of this:

http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe.b@mm.html

But that attached file is a new name variant.

On Tue, 2003-03-11 at 14:07, Mike M wrote:
> I just got an email with a subject:
> Check out these patch from M$ Corporation
> 
> It only had an attached file called: 
> q113407.exe
> 
> Nothing Googles on the subject or the filename.  
> 
> Here are the headers:
> Status: R 
> Return-Path: <robert.wotherspoon at sympatico.ca>
> Received: from tomts9-srv.bellnexxia.net ([209.226.175.53])
>         by merlin (EarthLink SMTP Server) with SMTP id 18SOyA2gf3NZFlq0
>         Tue, 11 Mar 2003 10:32:55 -0800 (PST)
> Received: from workstation5 ([64.231.209.78]) by tomts12-srv.bellnexxia.net
>           (InterMail vM.5.01.04.19 201-253-122-122-119-20020516) with ESMTP
>           id 
> <20030311180052.XRSU11647.tomts12-srv.bellnexxia.net at workstation5>;
>           Tue, 11 Mar 2003 13:00:52 -0500
> From: "WOTHERSPOON" <robert.wotherspoon at sympatico.ca>
> To: 
> -A LONG LIST OF EMAIL ADDRESSES HERE-
> Subject: Check out these patch from M$ Corporation.
> Date: Tue, 11 Mar 2003 13:08:24 -0500
> Message-ID: <045e01c2e7f9$351a8a80$6a01a8c0 at bellnet.ca>
> MIME-Version: 1.0
> Content-Type: application/x-msdownload;
>   name="q113407.exe"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment;
>         filename="q113407.exe"
> X-Priority: 3 (Normal)
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
> Importance: Normal
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> X-Status: N
> -- 
> Mike M.
> _______________________________________________
> TriLUG mailing list
>     http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ:
>     http://www.trilug.org/~lovelace/faq/TriLUG-faq.html
>