[Techtalk] Big Question

briskola briskola at svinje.net
Wed Nov 20 10:36:17 EST 2002


On Wednesday 20 November 2002 09:22, Andrew wrote:
>  Hi All,
>
> 	I recieved this e-mail (below) along with a 157K attachment. It was
> addressed to and the return the address, was my address, but with a
> different name. I have no idea who this is, nor did I reply as it sems
> it would only reply to me.
> 	The attachment MIME type is;
> 	 multipart/alternative	795B
> 	 text/html		657B
> 	 audio/xwav		157.1 README.EXE
>
> 	This is a sample of what was in the attachment....
> áfkÉã / èÿÿÿ ýÿÿÿ×EÐ ýÿÿèýÿÿPQU¨ÿÜ@   ÿÿÿ\@ MÈÿ,@ MÔÿ,@ Mìÿ,@  MØJ¹¥@
> Mäÿ0@ &á®÷ç0ÞÆø3¯yëã±A¤N·q®§öúôÙö)Ö
> éwéwQüèwêw<éwÔèwÊKèw$èw#éweéwb_éwtKèw§éw9éwéw¦ÀèwÖæéwΧëwÕ¬ëw/®ëwsfc.dll
> z;ÏvùJ¿ JXP;ËvX8ë÷XPJJ;L$r
>
>
> 		Can anyone tell me what this is?

Well, it seems like a classic virus. To find out where it really came from, 
you should look at the extended headers, where there should be the 
originating IP.



More information about the Techtalk mailing list