[Esa-l] Looks like another new one

[Jeff Bettes]

Yup, it sure is ,  it actually says so in the script,

>rem  "Plan Colombia" virus v1.0=0A=
>rem  by Sand Ja9e Gr0w   (www.colombia.com)=0A=
>=0A=
>rem  Dedicated to all the people that want to be hackers or crackers, in =
>Colombia  =0A=
>rem  This program is also a protest act against the violence and =
>corruption that Colombia lives...=0A=
>rem  I always wanting that all this finishes, I have said...=0A=


Guess I should have read the script to find out what it was...never seen 
the ones that change the name of the attachment.




At 09:58 AM 2/19/01 -0700, Brett Glass wrote:
>Isn't it "Plan Colombia" that generates filenames and subjects
>like that?
>
>--Brett
>
>At 09:25 AM 2/19/2001, Jeff Bettes wrote:
>
> >Just looking at my trapped notices and got one Sunday night
> >
> >>REPORT: Trapped poisoned executable "BEGOIOF.GIF.vbs"
> >>REPORT: Not a document, or already poisoned by filename. Not scanned 
> for macros.
> >>STATUS: Message quarantined in /var/mail/quarantine, not delivered to 
> recipient.
> >
> >>Subject: HUGETI
> >
> >
> >Can't find any info on the usual virus sites, anyone heard of this one.
> >
> >As usual, the scanner comes thru again...thanks John,
> >
> >
> >Jeff Bettes
> >Grace & Wild Inc.
> >jbettes at gwstudio.com
> >
> >
> >
> >
> >_______________________________________________
> >E-mail Security Announce list mailing list
> >E-mail Security Announce list at spconnect.com
> >http://www.spconnect.com/mailman/listinfo/esa-l