Mailing List Archive

New W32.Gibe variant making the rounds?
I just a little while ago was informed by my mail system admin that a
message intended for me had been snagged by our mail filters as containing
the W32_GibeA virus. Many of you probably remember that this was the little
bugger that went around under the guise of a Microsoft Security update and
had an attachment called Q216309.exe, which was actually a backdoor and
massmailer with its own SMTP engine.

Well, this one seemed to be a bit different. It had a return address of
"pgp-key-request@hostmaster.org" and the subject line was "Introduction on
ADSL". I've requested a copy of the original message. If and when I receive
it, I'll forward any other relevant details along. I'm assuming that this is
an attempt to tart up the original W32.Gibe virus and cause a new round of
infections.

Apologies if this is something that is already seen; I was concerned that a
new social-engineering attempt using the old Gibe virus was being made.

Regards,

Corey Snow

#########################################################
The information contained in this e-mail and subsequent attachments may be privileged,
confidential and protected from disclosure. This transmission is intended for the sole
use of the individual and entity to whom it is addressed. If you are not the intended
recipient, any dissemination, distribution or copying is strictly prohibited. If you
think that you have received this message in error, please e-mail the sender at the above
e-mail address.
#########################################################
Re: New W32.Gibe variant making the rounds? [ In reply to ]
On Fri, 12 Jul 2002, Snow, Corey wrote:

> I just a little while ago was informed by my mail system admin that a
> message intended for me had been snagged by our mail filters as containing
> the W32_GibeA virus. Many of you probably remember that this was the little
> bugger that went around under the guise of a Microsoft Security update and
> had an attachment called Q216309.exe, which was actually a backdoor and
> massmailer with its own SMTP engine.
>
> Well, this one seemed to be a bit different. It had a return address of
> "pgp-key-request@hostmaster.org" and the subject line was "Introduction on
> ADSL". I've requested a copy of the original message. If and when I receive
> it, I'll forward any other relevant details along. I'm assuming that this is
> an attempt to tart up the original W32.Gibe virus and cause a new round of
> infections.
>
> Apologies if this is something that is already seen; I was concerned that a
> new social-engineering attempt using the old Gibe virus was being made.
>
> Regards,
>
> Corey Snow

You're about a week and a half late on this one.

--
Yours,
J.A. Terranson
sysadmin@mfn.org

If Governments really want us to behave like civilized human beings, they
should give serious consideration towards setting a better example:
Ruling by force, rather than consensus; the unrestrained application of
unjust laws (which the victim-populations were never allowed input on in
the first place); the State policy of justice only for the rich and
elected; the intentional abuse and occassionally destruction of entire
populations merely to distract an already apathetic and numb electorate...
This type of demogoguery must surely wipe out the fascist United States
as surely as it wiped out the fascist Union of Soviet Socialist Republics.

The views expressed here are mine, and NOT those of my employers,
associates, or others. Besides, if it *were* the opinion of all of
those people, I doubt there would be a problem to bitch about in the
first place...
--------------------------------------------------------------------