LL-L "Virus alert" 2004.01.27 (04) [E]

Lowlands-L lowlands-l at lowlands-l.net
Tue Jan 27 16:08:04 UTC 2004


======================================================================
L O W L A N D S - L * 27.JAN.2004 (04) * ISSN 189-5582 * LCSN 96-4226
http://www.lowlands-l.net * lowlands-l at lowlands-l.net
Rules & Guidelines: http://www.lowlands-l.net/index.php?page=rules
Posting Address: lowlands-l at listserv.linguistlist.org
Server Manual: http://www.lsoft.com/manuals/1.8c/userindex.html
Archives: http://listserv.linguistlist.org/archives/lowlands-l.html
Encoding: Unicode (UTF-8) [Please switch your view mode to it.]
=======================================================================
You have received this because you have been subscribed upon request.
To unsubscribe, please send the command "signoff lowlands-l" as message
text from the same account to listserv at listserv.linguistlist.org or
sign off at http://linguistlist.org/subscribing/sub-lowlands-l.html.
=======================================================================
A=Afrikaans Ap=Appalachian B=Brabantish D=Dutch E=English F=Frisian
L=Limburgish LS=Lowlands Saxon (Low German) N=Northumbrian
S=Scots Sh=Shetlandic V=(West)Flemish Z=Zeelandic (Zeêuws)
=======================================================================


From: R. F. Hahn <lowlands-l at lowlands-l.net>
Subject: Virus alert

Folks,

There is another nasty computer virus afoot.  Please take precautions.
Below are excerpts from a McAfee message.

Regards,
Reinhard/Ron

***

This is a mass-mailing worm that arrives in an email message as follows:

Subject: (Random)
Body:  (Varies, such as)

The message cannot be represented in 7-bit ASCII encoding and has been sent
as a binary attachment.
Attachment: (varies - often arrives in a ZIP archive) (22,528 bytes)

The icon used by the file tries to make it appear as if the attachment is a
text file

***

DO NOT OPEN THE ATTACHMENT.  Our current virus scan will NOT detect or
prevent the spread of this virus.

Indications of infection include:

1. Upon executing the virus, Notepad is opened, filled with nonsense
characters.
2. Existence of the following files:

 c:\Program Files\KaZaA\My Shared Folder\activation_crack.scr
 c:\WINDOWS\Desktop\Document.scr
 c:\WINDOWS\SYSTEM\taskmon.exe

It also uses a DLL that it creates in the Windows System directory:

 c:\WINDOWS\SYSTEM\shimgapi.dll (4,096 bytes)

***

For more information, please visit McAfee's Virus Information Library at:
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100983



================================END===================================
* Please submit postings to lowlands-l at listserv.linguistlist.org.
* Postings will be displayed unedited in digest form.
* Please display only the relevant parts of quotes in your replies.
* Commands for automated functions (including "signoff lowlands-l") are
  to be sent to listserv at listserv.linguistlist.org or at
  http://linguistlist.org/subscribing/sub-lowlands-l.html.
=======================================================================



More information about the LOWLANDS-L mailing list