[SpamCop-List] Re: This is nasty

[N. Miller]

On Sat, 6 Aug 2005 13:31:59 -0500, GreyWater wrote:

> Path: news.spamcop.net!not-for-mail
> From: "GreyWater" <a at b.com>
> Newsgroups: spamcop
> Subject: This is nasty
> Date: Sat, 6 Aug 2005 13:31:59 -0500
> Organization: SpamCop
> Lines: 798
> Message-ID: <dd32hp$bv1$1 at news.spamcop.net>
> Reply-To: "GreyWater" <a at b.com>
> NNTP-Posting-Host: cpe-24-167-75-178.houston.res.rr.com
> X-Trace: news.spamcop.net 1123356026 12257 24.167.75.178 (6 Aug 2005 19:20:26 GMT)
> X-Complaints-To: news at news.spamcop.net
> NNTP-Posting-Date: Sat, 6 Aug 2005 19:20:26 +0000 (UTC)
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> X-RFC2646: Format=Flowed; Original
> Xref: news.spamcop.net spamcop:149616
> The attachment for this email was a zip file named "iPod Purchase 
> Agreement.zip" containing a file "iPod Purchase Agreement.scr". I have not 
> seen anything like this before. I guess it's supposed to make you upset so 
> you rush to open the attachment and run whatever nasty payload this carries.
> 
> Opening the file triggers MS Anti-Spyware, which opens a dialog box asking 
> if you want to run it. Spamcop and AVG let it through....

Rats, now I have to clean this crap from my HDD. Probably hiding in the
System Restore database. Thanks for nothing.

The good news is that my news reader will delete the body. I will just
quote the headers with your brief intro for my DB.

Please, do not do that again. Heed Mike's excellent advice about posting
trackers, and take Joris' advice to heart. The single most effective
barrier against malware is the system operator.

-- 
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint