ABERDEEN-L Archives

Archiver > ABERDEEN > 2001-10 > 1002207431


From: "Braehead" <>
Subject: Re: [ABERDEEN] VIRUS ALERT
Date: Thu, 4 Oct 2001 07:57:11 -0700
References: <021401c14c76$854f4060$fbba36cb@default>


Cindy-Leigh :
This was indeed a nasty virus, and I am afraid I cant help you with
it, however, I did pick up a tip the other day. This is relating to these
viruses that send out e-mails to everyone on your address list. In your
address book highlight the Main Identies Contacts and put in a new contact.
Type in the first name 000 and nothing else. Now when someone tries to send
out msges to all your contacts it will show an error msge on your screen
that one of your contacts does not have an address. You will then know that
you have a problem that your anti-virus prog will correct. Should you wish
to send a msge to all your sddresses just de-select the 000 and it will work
for you.

Bye for now
Stewart Gammie......ANESFHS #7021
Reply to :- :
Web Page:-
http://www.genealogy.com/users/g/a/m/Stewart-Gammie/?Welcome=987129424
Researching :- GAMMIE,SHARP,CHRISTIE in Aberdeenshire & Banffshire
STEWART,WOOD,BELL in Fife,Perthshire &
Angus
***************************************************************

----- Original Message -----
From: "9LOTN" <>
To: <>
Sent: 3-Oct-01 6:47 PM
Subject: [ABERDEEN] VIRUS ALERT


> Recently I recieved a rather nasty virus that proved most difficult to get
rid of, in the end I had to reformat to get rid of it. It attaches itself
to your email & seems to also eat away at memory & resources. (Silly me in
a tired state opened it!) I run Macafee updated to 2001...but this did not
pick it up. You require the DAT file 4134 minimum to pick it up.
>
> It arrived off either the Aberdeen or Australia-New Zealand list.
>
> It will arrive as a reply from 'someone on the list' ....with your topic
info in the subject line.
> It will have an attachment with it....and in the body of the message it
will say "Take a look to the attachment"
> Once running, the trojan attempts to mail the victim's IP Address to the
author. Once this information is obtained, the author can connect to the
infected system via the Internet and steal personal information such as
usernames, and passwords. In addition, the trojan also contains a keylogger
program which is capable of capturing other vital information such as credit
card and bank account numbers and passwords.
>
> This was a mutated version of the original virus. The details on the
original virus can be found at
http://vil.mcafee.com/dispVirus.asp?virus_k=99069&;
>
> Recieved files as attachments to be wary of:
>
> Card.pif
> docs.scr
> fun.pif
> hamster.ZIP.scr
> Humor.TXT.pif
> images.pif
> New_Napster_Site.DOC.scr
> news_doc.scr
> Me_nude.AVI.pif
> Pics.ZIP.scr
> README.TXT.pif
> s3msong.MP3.pif
> searchURL.scr
> SETUP.pif
> Sorry_about_yesterday.DOC.pif
> YOU_are_FAT!.TXT.pif
>
> Also if you have been infected the following 3 files you should be able to
locate in your windows/system directory:
>
> kern32.exe
> inetd.exe
> hksdll.dll
>
>
>
>
> Regards
>
> Cindy-Leigh
>
> ______________________________

This thread: