VIRUS ALERT on this list!!!!!!!
zscoundrel
zscoundrel at kc.rr.com
Tue Jan 1 17:25:23 CST 2002
This is a windoze type virus that infects the WSOCK32.DLL file. Look
for one of the following on your system:
dwarf4you.exe
anpo porn.scr
atchim.exe
branca de neve.scr
dunga.scr
enano porno.exe
joke.exe
midgets.scr
sexy virgin.scr
Here is a link to a report about it on McAfee's site.
http://vil.mcafee.com/dispVirus.asp?virus_k=98873&
Michael Pratt wrote:
> Someone has a virus on thier machine from this list! I highly recommend
> doing a search for this file sexy virgin.scr and deleting it. the
> subject of the message is
>
> "Snowhite and the Seven Dwarfs - The REAL story!"
>
> If you cant delete it you must format and reload your hard drive! Who
> ever has this IP address 12.75.141.70.
>
> Return-path: <owner-kclug at marauder.illiana.net
> <mailto:owner-kclug at marauder.illiana.net>>
> Received: from mta2.rcsntx.swbell.net (mta2-pr.rcsntx.swbell.net)
> by sims1.rcsntx.swbell.net
> (Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9)
> with ESMTP id <0GP900KO15MFTL at sims1.rcsntx.swbell.net
> <mailto:0GP900KO15MFTL at sims1.rcsntx.swbell.net>>; Tue,
> 1 Jan 2002 03:13:34 -0600 (CST)
> Received: from marauder.illiana.net ([207.227.243.140])
> by mta2.rcsntx.swbell.net
> (Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9)
> with ESMTP id <0GP9000A85SE70 at mta2.rcsntx.swbell.net
> <mailto:0GP9000A85SE70 at mta2.rcsntx.swbell.net>>; Tue,
> 01 Jan 2002 03:17:04 -0600 (CST)
> Received: from marauder.illiana.net (marauder [127.0.0.1])
> by marauder.illiana.net (8.12.1/8.12.1) with ESMTP id g0193s3V005209 for
> <kclug-list at marauder.illiana.net
> <mailto:kclug-list at marauder.illiana.net>>; Tue, 01 Jan 2002 03:03:54 -0600
> Received: (from majordom at localhost <mailto:majordom at localhost>)
> by marauder.illiana.net (8.12.1/8.12.1/Submit)
> id g0193srA005208 for kclug-list; Tue, 01 Jan 2002 03:03:54 -0600
> Received: from mtiwmhc25.worldnet.att.net
> (mtiwmhc25.worldnet.att.net [204.127.131.50])
> by marauder.illiana.net (8.12.1/8.12.1) with ESMTP id g0193o3V005203 for
> <kclug at kclug.org <mailto:kclug at kclug.org>>; Tue, 01 Jan 2002 03:03:50 -0600
> Received: from leland-riffel ([12.75.141.70]) by mtiwmhc25.worldnet.att.net
> (InterMail vM.4.01.03.27 201-229-121-127-20010626)
> with SMTP id
> <20020101090446.OJAR15547.mtiwmhc25.worldnet.att.net at leland-riffel
> <mailto:20020101090446.OJAR15547.mtiwmhc25.worldnet.att.net at leland-riffel>>
> for
> <kclug at kclug.org <mailto:kclug at kclug.org>>; Tue, 01 Jan 2002 09:04:46 +0000
> Date: Tue, 01 Jan 2002 09:04:55 +0000
> From: Hahaha <hahaha at sexyfun.net <mailto:hahaha at sexyfun.net>>
> Subject: Snowhite and the Seven Dwarfs - The REAL story!
> Sender: owner-kclug at marauder.illiana.net
> <mailto:owner-kclug at marauder.illiana.net>
> To: mtpratt at swbell.net <mailto:mtpratt at swbell.net>, jfburke at swbell.net
> <mailto:jfburke at swbell.net>, cliftonc at swbell.net
> <mailto:cliftonc at swbell.net>,
> davidwoo at swbell.net <mailto:davidwoo at swbell.net>, mallahan at swbell.net
> <mailto:mallahan at swbell.net>, sdoerr at swbell.net <mailto:sdoerr at swbell.net>
> Message-id:
> <20020101090446.OJAR15547.mtiwmhc25.worldnet.att.net at leland-riffel
> <mailto:20020101090446.OJAR15547.mtiwmhc25.worldnet.att.net at leland-riffel>>
> MIME-version: 1.0
> Content-type: multipart/mixed; boundary="--VE
>
More information about the Kclug
mailing list