I got a virus this morning on an e-mail stating that I had paid my
dues for 2001 in september 2000, attached my checque number.
The attachment was actually NEWPROF.EXE -
I have not tried it out, but a file of this name exists in windows NT.
It creates a new user profile.
Kent


> I actually got Happy99.exe the other day.  I thought I had gone through
> a time warp.
>
> jp
>
> Carl wrote:
> >
> > In the last 3 days I've gotten about 5 emails with a virus attached.
> >   All different types of attachments. .doc. .xls  .zip.
> >   This is WAY higher then my normal virus detection (about 1 every couple
> > of months).
> >
> >    I was wondering if I was being singled out, but now it appears that
> > other people are also experiencing this problem.
> >
> > The headers show all different sources, but for some reason ( I'm not sure
> > why) I get the feeling that they are in someway mail list list related.
> > I've noticed one of the virii coming in a  TAPR list I subscribe to.  I'm
> > not sure what the common denominator is yet, but I'm still looking.
> >
> >   BTW, if you have an attachment with a .zl extension, That's Zonealarm's
> > active email protection 'quarantining' the attachment by adding/changing
> > the extension.
> >
> > Carl
> >
> > At 01:34 PM 7/23/2001, you wrote:
> > >I've gotten 5 emails today all carrying a virus with .pif or .doc as the
> > >file name extension but that are actually executables. The emails all say
> > >something like "I send you this file in order to have your advice" except
> > >for one which appears to be a mail bounce notice
> > >
> > >They have been posted by
> > >142.177.77.1 = hlfx27-1.ns.sympatico.ca
> > >195.80.173.138 = collak.profi.sk mailto:postmaster@profi.sk
> > >200.52.208.19 = customer-VER-208-19.megared.net.mx
> > >mailto:grosado@megared.com.mx
> > >194.29.160.2 = elektron.elka.pw.edu.pl mailto:postmaster@pw.edu.pl
> > >
> > >Let me know if anyone else get these and NEVER open an attachment that you
> > >didn't expect to receive or that you don't know is not a program. PIF and
> > >DOC can be programs just as easily as EXE, COM, VVS.
> > >
> > >---
> > >James Newton, Admin #3 mailto:jamesnewton@piclist.com
> > >1-619-652-0593 VM 1-208-279-8767 FAX
> > >PIC/PICList FAQ: http://www.piclist.com or .org
> >
> > --
> > http://www.piclist.com hint: The PICList is archived three different
> > ways.  See http://www.piclist.com/#archives for details.
>
> --
> http://www.piclist.com hint: The PICList is archived three different
> ways.  See http://www.piclist.com/#archives for details.
>
>
>

--
http://www.piclist.com#nomail Going offline? Don't AutoReply us!
email listserv@mitvma.mit.edu with SET PICList DIGEST in the body