it really looks like Swen : go there http://www.viruslist.com/eng/viruslist.html?id=88029 and search for "I'm afraid I wasn't able to deliver your message to the following addresses"
----- Original Message ----- From: "Ron Clark" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 19, 2003 5:43 PM Subject: Re: [Full-Disclosure] new virus: (fwd) > > > ---------- Forwarded message ---------- > Date: Fri, 19 Sep 2003 18:22:00 +0300 > From: Eero Volotinen <[EMAIL PROTECTED]> > To: Ron Clark <[EMAIL PROTECTED]> > Subject: Re: [Full-Disclosure] new virus: > > Yes, it's swan virus. > > -- > Eero > > If you meant swen, this doesn't look like swen. Nothing mentioning > micro$oft > > The test of the email is : > > > >Hi. > >I'm sorry to have to inform you that I wasn't able to deliver your > >message to the following addresses: > > > > > > > >Undelivered message to [EMAIL PROTECTED] > > > with an audio attachment > > ----- Original Message ----- > From: "Ron Clark" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, September 19, 2003 5:38 PM > Subject: [Full-Disclosure] new virus: > > > > > > Has anyone seen an email going around with subject bug message > > containing a supposed audio attachment that is really an exe named > > ckcwr.exe. > > > > Is this a possible new virus? I have recieved numerous cpoies of this > > email since last night. > > > > Ron Clark > > System Administrator > > Armstrong Atlantic State University > > > > _______________________________________________ > > Full-Disclosure - We believe in it. > > Charter: http://lists.netsys.com/full-disclosure-charter.html > > > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.netsys.com/full-disclosure-charter.html > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
