Possible Virus or Spyware? ....What the heck?

Ok....

This is very strange. I received an email with the subject "1 ". I read it, it only sai "1 ". There was an attachment called "1 ".

I opened the attachment because it was a TXT document. It was blank except for with a space.

Now, there's a folder called "1" on my desktop. When I opened it, it contained a file called "index ".

I did not open that though.

However, it was a Nero Showtime File. I do know that with Nero ShowTime, you can open an index.dat file - or at least, ST recognizes that extension somehow...

Also, I was able to send this file to the recyvle bin and delete it from there - although, you aren't able to delete index.dat


So...could this be a virus or spyware?

 

It has been discussed in the DShield mailing list, and in the handlers diary over at the Internet Storm Center for the last couple of days. The most recent explanation is that the email is being sent from Bagle infected machines although intent is undetermined. Everyone's pretty stumped, possibly this is test for something in the future, or a broken version of another spam attempt.


http://isc.sans.org/diary.php?date=2005-07-24

You opened it? Even as a text file, you are braver than me.

Steph

 

One thing that is very important to remember, never open anything from somebody you don't know. I have also received a couple of these emails and have just deleted them. Have you run any virus or spyware scans? Have you tried deleting this file in SAFE mode? Are you seeing any strange happenings with your system? The best thing to do would be to remove this as soon as you can.

Mike