I don't think the gif file does anything (it's not even a valid gif). I think all it is trying to do is to get people to go to an evil web site. The site is: http://www.%76%69%6B%6FrdXXXXX.com/default.htm (I added the XXXXX so nobody would try to click on this) This is vicord.com which appears to be down right now:
Service Temporarily Unavailable The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later. ---------------------------------------------------------------------------- ---- Apache/1.3.31 Server at vikord.com Port 80 -----Original Message----- From: Philip Walley [mailto:[EMAIL PROTECTED] Sent: Friday, August 27, 2004 12:12 PM To: Exchange Discussions Subject: RE: New virus outbreak... I've got reports from my helpdesk of these starting to show up. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Alverson, Tom Posted At: Friday, August 27, 2004 10:53 AM Posted To: Exchange Conversation: New virus outbreak... Subject: RE: New virus outbreak... Yes we are getting them here but our email spam blocker (before the av gateway and exchange) is blocking them as executables. I have seen 1.gif and 2.gif so far. -----Original Message----- From: Eric Fretz [mailto:[EMAIL PROTECTED] Sent: Friday, August 27, 2004 11:46 AM To: Exchange Discussions Subject: New virus outbreak... My network is getting pegged with messages that contact an 86 byte .GIF file. The file is usually titled "1.gif" and upon opening the message, it tries to execute an ActiveX component. Anyone seen this? Eric Fretz L-3 Communications ComCept Division 2800 Discovery Blvd. Rockwall, TX 75032 tel: 972.772.7501 fax: 972.772.7510 _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. CONFIDENTIALITY NOTICE: This e-mail and any attachments are confidential. If you are not the intended recipient, any further dissemination or use of this e-mail is prohibited. If you have received this e-mail in error, please notify us immediately by returning it to the sender. You should then delete all copies from your system and destroy any hard copies you may have made. Thank you for your cooperation. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
