ALERT: Message from owner-vms-l was quarantined; File
TETHYS/Server/HTC2@ln.matav.hu
Please refer to the Antigen Quarantine Area for more details.
INCIDENT
------------------------------------------------------------------------------------------------------------------------
Scan Time: 2002.07.16 09:41:00
Detection: File decrypt-password.exe infected with W32/Frethem.K@m
virus
Disposition: Note has been quarantined
Quarantined: (Document link: Quarantine Area document)
CN=TETHYS/OU=Server/O=HTC2!!A6QArea.NSF
Version: Antigen 6.0 SR3 (Build 606)
MESSAGE
------------------------------------------------------------------------------------------------------------------------
Message ID: 002A3449
Sender: owner-vms-l@ludens.elte.hu
Subject: Re: Your password!
Recipients: pogatsaj@ln.matav.hu
Routing:
SYNOPSIS
------------------------------------------------------------------------------------------------------------------------
HTML Message Body
(strikethrough: << Normal >>)
Status: OK
FILE ATTACHMENT 'password.txt'
<< Normal >>
File size: 31 bytes
Host type: STREAM
Content type: Text.Plain
Compression: OFF
Attributes: PUBLIC READ-WRITE
File flags: 34
Created: 2002.07.16 09:40:59
Modified: 2002.07.16 09:40:59
Status: OK
FILE ATTACHMENT 'decrypt-password.exe'
<< W32/Frethem.K@m >>
File size: 48640 bytes
Host type: STREAM
Content type: Exe.Win32
Compression: OFF
Attributes: PUBLIC READ-WRITE
File flags: 2
Created: 2002.07.16 09:40:59
Modified: 2002.07.16 09:40:59
Status: Displaced
<< decrypt-password.exe >>
Scanner: Norman 5.0.0 [5.0.0] W32/Frethem.K@m