[Esa-l]What's this? (Take care if you run the attachment; probable malware)

[Brett Glass]

Just got this in my box. Trojan, worm, or what?

--Brett

>Return-Path: <amessandro.orsi at telnetsystems.it>
>Received: from albanet1.albaclick.com ([212.17.204.2])
>         by lariat.org (8.9.3/8.9.3) with ESMTP id BAA09044
>         for <brett at lariat.org>; Tue, 8 May 2001 01:46:36 -0600 (MDT)
>Date: Tue, 8 May 2001 01:46:36 -0600 (MDT)
>Message-Id: <200105080746.BAA09044 at lariat.org>
>Received: from mail.albaclick.com ([213.213.44.23])
>           by albanet1.albaclick.com (Post.Office MTA v3.5.3 release 223
>           ID# 0-70924U11000L1100S0V35) with SMTP id com;
>           Tue, 8 May 2001 09:46:20 +0200
>FROM: Alessandro Orsi <alessandro.orsi at telnetsystems.it>
>SUBJECT: fragt jetzt ob Sie
>X-MSMail-Priority: Normal
>X-Priority: 3
>X-Mailer: Microsoft Outlook Express 4.72.3612.1700
>MIME-Version: 1.0
>X-Security: Warning! Do not open files attached to e-mail if you do not
>         have an up-to-date virus protection program or did not expect to
>         receive them. Even if the message is from someone you know, an
>         attachment can contain a virus sent without his or her knowledge.
>Content-Type: multipart/mixed;
>         boundary="----=_NextPart_000_0009_01B5A9D0.D6A9D080"
>Content-Transfer-Encoding: 7bit
>X-UIDL: 3d4ec81b572987043e89301187f20f89
>
>Und der Befehle speichern mvchten. Antworten Sie bitte 'ja'.'
>inst_msg3$      fullname$u Connect ist  installiert. ffne ein neues
>Dokument und pr|fe das Datei-Menu; es zeigt den neuen Befehl Text
>Scannen.+inst_title$Installation  cnctname$(      menuname$.

[demime 0.98d removed an attachment of type application/octet-stream which had a name of RNAAPP.9049DEFANGED-EXE]