> So, you get a fairly plausible message and filename from someone you
> *know* and..

I haven't known any of the people who sent me this virus, and there have
been a lot. Why does everybody have me in their address book :(

Regards,

David Stubbs

WEB: www.nti-uk.com
TEL UK: 07968 397782


> -----Original Message-----
> From: pic microcontroller discussion list
> [mailto:PICLIST@MITVMA.MIT.EDU]On Behalf Of P.J. McCauley
> Sent: 27 July 2001 11:06 AM
> To: PICLIST@MITVMA.MIT.EDU
> Subject: Re: [OT]: Heads up! Lots of Virus incoming?
>
>
> Are you using ZoneAlarm by any chance? ZoneAlarm adds an extra
> extension to
> files to "quarantine" them.
>
> Joe
>
> ----- Original Message -----
> From: "Randy Glenn" <PICxpert@HOME.COM>
> To: <PICLIST@MITVMA.MIT.EDU>
> Sent: Monday, July 23, 2001 10:20 PM
> Subject: Re: [OT]: Heads up! Lots of Virus incoming?
>
>
> > I got one with a file with the extension ".doc.zl3" - anyone
> have any idea
> > what a ZL3 file is?
> >
> > -Randy Glenn
> >
> > Measure twice, cut once, discard, repeat.
> > =================================================
> >      PICxpert@home.com - PICxpert@yahoo.com
> > PICxpert.com going away - use picxpert.dyndns.org
> >     Not that the site works yet, of course...
> > =================================================
> >
> > -----Original Message-----
> > From: pic microcontroller discussion list
> > [mailto:PICLIST@MITVMA.MIT.EDU]On Behalf Of Spehro Pefhany
> > Sent: Monday, July 23, 2001 5:07 PM
> > To: PICLIST@MITVMA.MIT.EDU
> > Subject: Re: [PICLIST] [OT]: Heads up! Lots of Virus incoming?
> >
> >
> > At 01:34 PM 7/23/01 -0700, James Newton. Admin 3 wrote:
> >
> > >Let me know if anyone else get these and NEVER open an attachment that
> you
> > >didn't expect to receive or that you don't know is not a
> program. PIF and
> > >DOC can be programs just as easily as EXE, COM, VVS.
> > Isn't .scr an executable as well?
> >
> > Not from those sources, but I got one from a gal I often talk with at a
> > supplier in the Far East this morning with the .pif extension. NAV
> > reports it to contain  W32.Sircam.Worm. It also had the "I send you this
> > file in order to have your advice" text.
> >
> > This virus apparently sends itself to people in your address book at
> > random, and picks a file name to use from the hapless user as well.
> > The file was named (actual file name).doc.pif, so (l)users who
> > use software that hides file extensions may only see the ".doc" 8-(
> >
> > So, you get a fairly plausible message and filename from someone you
> > *know* and..
> >
> > Best regards,
> >
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> =-=-=-=-=-
> > =
> > Spehro Pefhany --"it's the network..."            "The Journey is the
> > reward"
> > speff@interlog.com             Info for manufacturers:
> http://www.trexon.com
> > Embedded software/hardware/analog  Info for designers:
> http://www.speff.com
> > Contributions invited->The AVR-gcc FAQ is at:
> http://www.bluecollarlinux.com
> >
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> =-=-=-=-=-
> > =
> >
> > --
> > http://www.piclist.com hint: The PICList is archived three different
> > ways.  See http://www.piclist.com/#archives for details.
> >
> > --
> > http://www.piclist.com hint: The PICList is archived three different
> > ways.  See http://www.piclist.com/#archives for details.
> >
> >
>
> --
> http://www.piclist.com hint: The list server can filter out subtopics
> (like ads or off topics) for you. See http://www.piclist.com/#topics
>
>

--
http://www.piclist.com hint: The list server can filter out subtopics
(like ads or off topics) for you. See http://www.piclist.com/#topics