Re: Virus warning to list members!

The message was certainly sent by Palyh (aka Sobig.B), but did anyone 
actually get the virus? The message I got contained only:

-- Binary/unsupported file stripped by Listar --
-- Type: application/octet-stream
-- File: your_details.pif

In other words, the list server removed the attachment (which is the 
virus). The message was completely safe.

Hamish.

j wrote:
> Hello all:
> Be careful with the message titled: Re:Movie
> This message contains a virus. Do not execute the attachment!!!
>  
> Here is the info from McAfee:
>  
> Name:  W32/Palyh@MM 
>  Risk Assessment    
>  - Home Users:  Medium 
>  - Corporate Users:  Medium 
> Date Discovered:  5/18/2003 
> Date Added:  5/18/2003 
> Origin:  Unknown 
> Length:  approx. 50 KBytes 
> Type:  Internet Worm 
> SubType:  E-mail worm
>  
> Target email addresses are extracted from files on the victim machine
> with the following extensions:
> *	WAB 
> *	DBX 
> *	HTM 
> *	HTML 
> *	EML 
> *	TXT 
> The worm may arrive in an email with the following characteristics:
> From: [email protected] 
> Subject: 
> *	Re: My application 
> *	Re: Movie 
> *	Cool screensaver 
> *	Screensavers 
> *	Re: My details 
> *	Your password 
> *	Re: Approved (Ref: 3394-65467) 
> *	Approved (Ref: 38446-263) 
> *	Your details
> Attachment:
> Note: As mentioned above, the file extenion may be truncated to .PI
> instead of the intended .PIF.
> *	approved.pif 
> *	ref-394755.pif 
> *	password.pif 
> *	ref-394755.pif 
> *	application.pif 
> *	screen_doc.pif 
> *	screen_temp.pif 
> *	movie28.pif 
> *	download1053122425102485703.uue 
> *	doc_details.pif 
> *	_approved.pif 
> Message Body:
> All information is in the attached file
>  
> 
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.483 / Virus Database: 279 - Release Date: 5/19/2003
>  
> 
> 
> 
> ------------------------------------------------------
> ephPod Mailing List 
> FAQ and HomePage http://www.ephpod.com 
> mailto:[email protected] to susbcribe 
> mailto:[email protected] to unsusbcribe 
> mailto:[email protected] the mailing-list itself 
> 
> 
> 
> 
> 
> 
> 



------------------------------------------------------
ephPod Mailing List 
FAQ and HomePage http://www.ephpod.com 
mailto:[email protected] to susbcribe 
mailto:[email protected] to unsusbcribe 
mailto:[email protected] the mailing-list itself