SIRCAM
VIRUS!
G
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm-----Original Message-----
From: EALES, Jack / RSAIFS - IOM [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 31, 2001 9:19 AM
To: NT System Admin Issues
Subject: Is it a bird... is it a worm??One of our users has received a number of identical messages from unrelated contacts that he (and I) is rather disturbed by... it looks like some sort of worm / buffer overflow - maybe? I'm no expert... but I sure there might be one or two of you out there ;-)The attachment (which isn't attached) name changes from message to message, but the bulk of the text of the message is the same and is as follows:<snip>------1E6A12EB_Outlook_Express_message_boundaryContent-Type: text/plain; charset=ISO-8859-1Content-Transfer-Encoding: quoted-printableContent-Disposition: message textHi! How are you=3FI send you this file in order to have your adviceSee you later=2E Thanks------1E6A12EB_Outlook_Express_message_boundary</snip>There then follows a stream of several hundred / thousand (no time to count - trust me it's lots!!) lines with seemingly random characters .I've hacked all this out as the list thinks I'm sending an attachment and refuses to post it. Does this mean anything / look familiar to anyone? If you want the full text let me know and I'll send it off-listJackJack EalesSenior PC / Network Project AnalystTel: +44 1624 821236Mob: +44 7624 450125Fax: +44 1624 824405Royal & SunAlliance International Financial Serviceshttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm