[iwar] New anti-American mass-mailing worm (fwd)

From: Fred Cohen (fc@all.net)
Date: 2001-09-24 12:51:44


Return-Path: <sentto-279987-2309-1001361184-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Mon, 24 Sep 2001 12:56:11 -0700 (PDT)
Received: (qmail 1126 invoked by uid 510); 24 Sep 2001 19:54:28 -0000
Received: from n22.groups.yahoo.com (216.115.96.72) by 204.181.12.215 with SMTP; 24 Sep 2001 19:54:28 -0000
X-eGroups-Return: sentto-279987-2309-1001361184-fc=all.net@returns.onelist.com
Received: from [10.1.1.220] by cj.egroups.com with NNFMP; 24 Sep 2001 19:54:02 -0000
X-Sender: fc@big.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-7_3_2_2); 24 Sep 2001 19:53:04 -0000
Received: (qmail 64284 invoked from network); 24 Sep 2001 19:50:47 -0000
Received: from unknown (10.1.10.26) by 10.1.1.220 with QMQP; 24 Sep 2001 19:50:47 -0000
Received: from unknown (HELO big.all.net) (65.0.156.78) by mta1 with SMTP; 24 Sep 2001 19:51:45 -0000
Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id MAA06736 for iwar@onelist.com; Mon, 24 Sep 2001 12:51:44 -0700
Message-Id: <200109241951.MAA06736@big.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen <fc@all.net>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Mon, 24 Sep 2001 12:51:44 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] New anti-American mass-mailing worm (fwd)
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

[FC - reposted anonymously]

Hi Fred:

FYI ...

Experts Issue Warning On WTC Worm
http://www.newsbytes.com/news/01/170438.html

A destructive new mass-mailing Internet worm with an anti-American
message is in the wild and spreading rapidly, virus researchers warned
today. 

The worm, which experts have named W32.Vote.A@mm or simply the Vote
worm, targets Windows computer users and arrives in an e-mail with the
subject line "Fwd:Peace BeTweeN AmeriCa and IsLaM!" and bearing an
attachment named wtc.exe. 

In an apparent attempt to trick users into running the program, the
message body reads "Is it a war against America or Islam.  Lets Vote to
live in peace."

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Get your FREE VeriSign guide to security solutions for your web site: encrypting transactions, securing intranets, and more!
http://us.click.yahoo.com/XrFcOC/m5_CAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-09-29 21:08:49 PDT