[PLUG] OT - which virus/worm?

John Hampton John.Hampton at gijoes.com
Mon May 13 20:51:01 UTC 2002


Terry said:
>Which virus or worm sends e-mail with .pif (and other executable files)
>with a content-type of audio/x-midi?

I believe that there are multiple virii (?) that do this. Correct me if I'm wrong, but I believe this is how they exploited IE and Outlook because IE mishandled the audio/x-midi and executed the attachment automatically with out checking what kind of file it was.  I think that nimda is one of the ones that does this.  I'm not sure of all of the different ones that use this method however.  Try going to www.mcaffee.com and take a look at their virus database.

John Hampton
Programmer Analyst
G.I. Joe's, Inc.
john.hampton at gijoes.com





More information about the PLUG mailing list