[Esd-l] xmascottage.shs

[Brett Glass]

At 01:47 PM 12/24/2001, Dan Riley wrote:

>The one copy we've intercepted had text and some other attachments
>that did not look at all virusy.  'strings' on xmascottage.shs seemed
>to show it to be Crimbo.exe, a Flash christmas card that made the
>rounds last year.  I'm rather suspicious of it being packed up as a
>scrap object, but NAV didn't recognize it as anything in particular.

A followup:

Maybe Symantec and/or McAfee is asleep on the job. We just checked
with the "sender" of one of the messages we captured, and she says
that she did NOT send it intentionally. I think it's a worm.

--Brett