Re: [MLUG - DISCUSSION] clever virus trick

["Christian M. Cepel" <EMAIL:PROTECTED>]

Heh,, Kevin Mitnick (sp?) was hosting that 
nutter/lunatic/alien/conspiracy theory/ghost show 'Coast to coast AM) 
two nights ago.

He may be a genius, but he's also a nutter with a poor grasp on reality.

He was however correct in discussing the new mac vulnerabilities.


Vern Green wrote:
> This is the standard operation for a lot of viruses. Yeah people
> finally got smart and stopped running executables, then comes this
> fake batch file thing.
>
> Users of all computer systems need to know not to click on
> attachments. I don't care if you are on Linux, MacIntosh or Windows,
> if you automatically open up every attachment you receive, then you
> are going to get a virus.
>
> Coincedentally, I found this article in MacWorld particularly
> interesting last night.
>
> http://www.macworld.com/news/2006/05/01/sans/index.php
>
> It looks as if things might start getting a little rocky for Mac users 
> soon.
>
> On 5/2/06, Mike Miller <EMAIL:PROTECTED> wrote:
> > I received an email with subject "My Best Photo" and an attached file
> > named Photo.zip.  The email text read as follows:
> >
> > Hi,
> > I want to share my photo with you.
> > Wishing you all the best.
> >
> > The interesting part is what was in the Photo.zip file:
> >
> > Archive:  Photo.zip
> >   inflating: Photo/Photo.bmp
> >  extracting: Photo/View-Photo.bat
> >
> > The file View-Photo.bat consisted of one line:
> >
> > Photo.bmp
> >
> > The file Photo.bmp was some sort of executable binary file.  When I look
> > at strings Photo.bmp I see "MS-Outlook" in there, so I think this virus
> > uses MS Outlook.
> >
> > Anyway, I guess this means that Windows will execute a file without 
> > .exe,
> > .com or .bat extension if it is called from within a batch file.  People
> > who receive this thing will try to open the Photo.bmp, but that will 
> > fail
> > because it isn't a proper BMP file, so they will then click the
> > View-Photo.bat file and they'll be screwed.
> >
> > Mike
> >
> > _______________________________________________
> > discussion mailing list
> > EMAIL:PROTECTED
> > http://mlug.missouri.edu/mailman/listinfo/discussion
>
>
> --
> Thanks
> F Vernon Green
>
> _______________________________________________
> discussion mailing list
> EMAIL:PROTECTED
> http://mlug.missouri.edu/mailman/listinfo/discussion



_______________________________________________
discussion mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/discussion