Re: [OT] Warning: Your application

At 12:58 AM 6/5/2003 +0200, you wrote:
>I just got an email that predent to be sent from
>'[email protected]' and containas a single
>attched file 'approved.pi' or 'approved.pif'.
>
>I didn't try to guess what is it but 'file' utility gives:
>approved.pi: MS-DOS executable (EXE), OS/2 or MS Windows
>
>Suspicious...
>So be warned...

Sounds like someone on this list is using either Megasloppy Outcrook or 
Outcrook Distress (you know what mail clients I mean) and picked up one of 
the sobig.* worms, most likely the Sobig.C variant...  See any of the 
following links for more (they're all variations on the theme, so pick your 
favourite antivirus software site):

         <http://www.norman.com/virus_info/w32_sobig_c.shtml>
         <http://securityresponse.symantec.com/avcenter/venc/data/[email protected]>
         <http://vil.nai.com/vil/content/v_100343.htm>
         <http://www.f-secure.com/sobig/>
         <http://www.sophos.com/virusinfo/analyses/w32sobigc.html>



  .-------------------------------------------------------------------------.
  |   George Silberstern - Web, Internet and Systems Solutions Consultant   |
  :=========================================================================:
  | Personal - Web: http://www.netaxs.com/~graf *** eMail: [email protected]  |
  | Business - Web: http://grafs.net/           *** eMail: [email protected]    |
  `-------------------------------------------------------------------------'