[ale] Spam irony, part two

[Irv Mullins]

On Monday 06 May 2002 02:35 pm, you wrote:
> I've been getting lots of mail with no body and a subject that looks
> like a random line pulled from a random document.  The from fields don't
> match the received-froms, and there's always an attachment...
>
> I always felt left out when email worms were going around.  I never got
> a single "I Love You" or "Nimda" letter.  I'm getting plenty from this
> new one, though...

I've been getting 1 or 2 per day which have suspicious addresses,
begin with a couple lines of html, and always have three 
"attachments":

1. a .pif , .exe, or .bat file, which is actually 
about 85k written in Visual C++, 

2. an empty file (zero bytes)

3. a file that appears to be a random selection, probably 
from the sender's disk. Sometimes a jpg, sometimes html...

item #1 contains some strings that make me think it may connect 
and send e-mail somewhere. Needless to say, I'm not going to 
run these. They wouldn't work on Linux anyway.
Is this just another 'worm' making the rounds?

Regards,
Irv


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.