[Esa-l]What's this? (Take care if you run the attachment; probable malware)

[Brett Glass]

I know what RNAAPP.EXE in Windows is and what it does. That's why I
am concerned; no one would actually ever send out copies of it.

I ran the file past McAfee, and it matches the signature for
Magistr/32. Perhaps this is a variant that selects executable
names and icons from your hard drive and sends itself out with
them.

--Brett

At 01:33 PM 5/8/2001, Graham Dunn wrote:
  
>http://www.modemhelp.net/newsletter/dun/combatrnaapp.shtml
>
>"RNAAPP (Remote Network Access Application) is a core executable for
>Microsoft Windows Dial-Up Networking."
>
>
>On Tue, May 08, 2001 at 05:02:16AM +0000, Brett Glass wrote:
>> Just got this in my box. Trojan, worm, or what?
>> 
>> --Brett
>> 
>[snip]
>> 
>> [demime 0.98d removed an attachment of type application/octet-stream which had a name of RNAAPP.9049DEFANGED-EXE]
>> _______________________________________________
>> E-mail Security Announce list mailing list
>> E-mail Security Announce list at spconnect.com
>> http://www.spconnect.com/mailman/listinfo/esa-l
>
>-- 
>  gdunn at inscriber.com     Graham Dunn         || ||| | ||| |||| | |||| | 
>_______________________________________________
>E-mail Security Announce list mailing list
>E-mail Security Announce list at spconnect.com
>http://www.spconnect.com/mailman/listinfo/esa-l