Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

An Angel

Status
Not open for further replies.

petermeachem

Programmer
Aug 26, 2000
2,270
GB
Has anyone any idea about this? Nothing on symantec that I can see. I assume it's a virus.

To: dbd_stealth@hotmail.com
Subject: An Angel
Date: Wed,02 Oct 2002 04:42:51 PM
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=fdufqgkfdufqgk

--fdufqgkfdufqgk
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD></HEAD><BODY>
<iframe src=3Dcid:vrgf height=3D0 width=3D0>
</iframe>
<FONT></FONT>
YDAn Angels Kiss We go through life so oftennot stopping to enjoy the dayAnd we take
each one for grantedAs we travel on our way For in your pain and sorrowAn Angels Kiss
will help you throughThis kiss is very privateFor it is meant for only you We never
stop to measureAnything we just might m
</BODY></HTML>

--fdufqgkfdufqgk
Content-Type: audio/x-midi;
name=An Angel.htm.pif
Content-Transfer-Encoding: base64 Peter Meachem
peter @ accuflight.com

 
That is the thing I talked about in another thread . It may be an Iframe attack.

The reference of the iframe may be invisble executed and download malware.

But that works only with outlook (Express) without installation of the security patches


hnd
hasso55@yahoo.com

 
I'd like to know what the attachment could be if anyone else has had this. Peter Meachem
peter @ accuflight.com

 
An Angel.htm.pif

Is that the attachments name? If so it's a virus but it's anyone's guess which virus it would be. Legit files don't have double extensions.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top