Re: [NTLK] Bizarre Dongle !

From: Eric L. Strobel (fyzycyst_at_comcast.net)
Date: Wed Oct 09 2002 - 23:38:49 EDT


somewhere near the temporal coordinates of 10/9/02 9:00 PM, the entity known
as Woo Lee transmitted the following from vitcitylb_at_earthlink.net:

>
> LOL! The Klez uses jpeg's, .wav files, and other 'interesting' files to =
> 'distract' the user. I downloaded an email with an 'innocent' looking =
> jpeg of an CD cover, Simplemail showed the jpeg and HTML text, but I =
> missed the attached .scr file, so I then downloaded the email onto the =
> iMac thru Outlook Express, again saw the jpeg in color, closed OE, clicked =
> on shutdown, Virex started to scan, scan complete, iMac shuts down. Next =
> night I download latest defs. from Virex, scan entire hard drive, iMac =
> freezes, virex is stuck on one text file, reboot with paperclip, can't =
> find text file, use 'Unhide tools', finds eight text files with 'no' =
> descriptions, drag-and-drop to virex-dropscan, virex says 'unknown file', =
> the next Sat. morning(the 2nd. Sat.) I get returned email stating 'virus =
> infected', figured out a different way to infect, virex hasn't responded =
> to this info., used 'unhide' to locate and delete the unnamed files. But =
> I saved the jpeg on my Newt. :-)

??? What's all this? I take it Klez is some sort of virus? And what is a
".scr" file (I've never seen one.)? Are you really saying that there's now
a virus that can infect a Mac via e-mail? And if so, what OS?

- Eric.

-- 

Eric Strobel (fyzycyst_at_NOSPAM^mailaps.org)

===================================================================== The odds are greatly against you being immensely smarter than everyone else in the field. If your analysis says your terminal velocity is twice the speed of light, you may have invented warp drive, but the chances are a lot better that you've screwed up. =====================================================================

-- Read the List FAQ/Etiquette: http://www.newtontalk.net/faq.html Read the Newton FAQ: http://www.chuma.org/newton/faq/ This is the NewtonTalk mailing list - http://www.newtontalk.net/



This archive was generated by hypermail 2.1.2 : Thu Oct 31 2002 - 12:02:25 EST