[Gllug] Virus or worm?

[Jake Jellinek]

Hi,

Forward it to me jj at positive-internet.com and you'll find out soon enough
what it is, when vscan bounces it back.

I've received the same virus/worm now from over 200 different sources in the
past 2 days, it's probably the most travelled and infected I've ever seen
any virus get, but I think the media are bored of reporting it other than
just "another virus". It got past a lot of the more commonly used virus
scanners initially, which is one of the reason it appears to have infected
so well. I hear from my sister-in-law (who I haven't yet managed to wean off
Hotmail (although this may have changed her mind)) that their built in virus
checking completely missed it, and continued to miss it for a long after it
was recognised.

The virus sends out random documents with double extensions which are
infected themselves, and can be embarrasing. It uses various address lists I
believe, and of course primarly affects Outlook/Windows  users. I've also
heard that on the 16th of October it will try to delete all files on an
infected system.

Cheers,

Jake.




----- Original Message -----
From: "Chris Bell" <chrisbell at overview.demon.co.uk>
To: <gllug at linux.co.uk>
Sent: Thursday, July 26, 2001 7:32 PM
Subject: [Gllug] Virus or worm?


>    I have just received 4 consecutive, incorrectly addressed, emails, all
of
> which were redirected to the same default mailbox as a single spool file.
> Each contained one large Outlook Express attatchment, the four adding up
to
> a possible virus or worm. If anyone would like a copy of them, complete
with
> full headers, please let me know whether you would like each line to be
> prefixed with any ASCII character to denature the file. (My computer was
of
> course totally unaffected).
>
>
> doc/lnk 213K
> doc/bat 230K
> doc/com 206K
> doc/pif 219K
>
> --
> Chris Bell
>
>
> --
> Gllug mailing list  -  Gllug at linux.co.uk
> http://list.ftech.net/mailman/listinfo/gllug
>
>


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug