OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Exploit-Dev Archives: Fw: Trojan/Worm on one of your pages and

Fw: Trojan/Worm on one of your pages and spams ICQ users.


BrainMaster (brain_masterHOTMAIL.COM)
Thu, 28 Oct 1999 14:59:26 -0400


----- Original Message -----
Located at http://download-icq2000.hypermart.net/ is a webpage that claims
to be a new version of the ICQ program. This program is a trojan/worm. It
runs on user computers and spams other ICQ users without there knowlege.
This program was reported in a security mailing list. The following is are
some messages about this program.
*snip*

----- Reply Message -----
From supportgo2net.com Thu Oct 28 08:51:03 1999
Received: from [207.178.55.5] by hotmail.com (3.2) with ESMTP id
MHotMailB9E1BBE70011D82197B8CFB23705F77C0; Thu Oct 28 08:51:03 1999
Received: from ems.go2net.com ([207.178.54.224] helomail.go2net.com)
 by redfish.go2net.com with smtp (Exim 2.11 #1)
 id 11grpB-0003xA-00
 for brain_masterhotmail.com; Thu, 28 Oct 1999 08:50:49 -0700
Date: Thu, 28 Oct 1999 09:00:10 -0700
From: supportgo2net.com
Subject: RE: Trojan/Worm on one of your pages and spams ICQ users.
To: brain_masterhotmail.com
Message-ID: <eGain7820Thu28Oct199909.00.10>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1;
Content-Transfer-Encoding: quoted-printable

Hello There,

Thank you for this information. We appreciate that you took the time to
alert us of this violation. As a result, the account will be removed from
our system within 24 hours and the user˙s IP and email address has been
banned from our network. Again, Thank you. Your actions has improved the
quality of our service and enhanced HyperMart˙s community.

Thank you for writing in and have a great day.

Anna

Visit http://www.hypermart.net/center for the new HyperMart Small Business
Center, your one-stop resource center for business products, services,
advice and information!



This archive was generated by hypermail 2.0b3 on Sat Oct 30 1999 - 16:18:27 CDT