- Posted by Fernando Ortiz <fernando at rxp.com> Dec 25, 2000
- 1825 views
------=_NextPart_000_0000_01C06E7A.7CB86A60 charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-MIME-Autoconverted: from 8bit to quoted-printable by smtp-server.tampabay.rr.com id NAA12144 > I've recieved it twice now. Both times this month. The last > was 20/12/2000. Both times in the account I get this list > sent to A quick look with a hex editor revealed MIME headers > and a link to GetModuleHandleA Needless to say I decided > against opening it, however I can find no reference to it > anywhere. It's not on the Symantec site, which is usually > pretty good. Anybody else come accross it? Upon viewing the file in notepad, one can see that it is a virus that propagates through the e-mailer installed on the victim=92s computer. The following was extracted using notepad: =ABO=E8=C9 _____ ^=E8} =8Bt$ _____ =E8t f=B8 =8Bt$ _____ =81=C6 =F8 =E8 =E8R "