[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: wav > mp3



At 16:19 09.05.1999 -0400, you wrote:
--------> This was the original Message:
MK>begin 644 Happy99.exe
MK>M35I0``(````$``\`__\``+@`````````0``:````````````````````````
MK>M``````````````````````$``+H0``X?M`G-(;@!3,TAD)!4:&ES('!R;V=R
MK>M86T@;75S="!B92!R=6X@=6YD97(@5VEN,S(-"B0W````````````````````
MK>M````````````````````````````````````````````````````````````
MK>M````````````````````````````````````````````````````````````
MK>M````````````````````````````````````````55!%``!,`00`GR77C@``
--------> The Repy begins here:


Hello, 

for some days I have goten three messages via the mailinglist "DJGPP" 
and "comp.os.msdos.djgpp" from "Endlisnis <s257m@unb.ca>" with an 
UU-Encoded attachement "happy99.exe". 

Now I have goten the same UU-Encoded attachement from "debian-user@lists.debian.org".

Can anyone tell me whats going on ???

This EXE file contains the "W95/Happy99.10000.trojan". 

I was wondering, that the Virusscanner on my Mail-Server had 
deleted the komplett INCOMING-Folder with the Mails. 

Then I have goten the E-Mails from a friend with deactivated 
Virus-Scanner and I have used the "F-PROT" to scan the files. 

--------------------------------------------------------------------------------
This is the result:
===================

Virus scanning report  -  8. May 1999   17:37

F-PROT 3.04a
SIGN.DEF created 3. February 1999
MACRO.DEF created 29. January 1999

Search: Local hard disks
Action: Automatic disinfection
Files: Standard file extensions
Switches: /ARCHIVE /PACKED /BEEP
No viruses found in memory.
No viruses were found in MBRs or hard disk boot sectors.

Scanning g:\_user\konzack\michelle\eudora\attach
G:\_USER\KONZACK\MICHELLE\EUDORA\ATTACH\HAPPY99.EXE  Infection: W95/Happy99.10000.trojan
File deleted.
--------------------------------------------------------------------------------

Suggestion:
===========

To protect users and Mail-Systems (!!!) from Viruses disallow Attachements 
from a kind oft this one. 

With the first sending (from DJ Delorie) of the three messages I have lost 
more then 150 Client E-Mails on my Server. 

OK, I know, the UU-Encoded File was inside the Body, but this can be scanned too. 

Webmistress Michelle

--
Michelle's Internet Service

http://www.michelle-is.com/index.htm                        
mailto:starone@cybercable.fr                                
                                                            
Michelle, Andrea-Cinderella Konzack                         
11, rue de Rosheim                 67000 Strasbourg - France
Tel. 0033 / 03.88.23.85.96        Fax. 0033 / 03.88.23.85.97
Mob. 0033 / 06.62.61.78.37                                         |
    ___    _ _____ _____  ____       __   _                 
   / _ \  /// ___// __ // __ /      / /  (_)__  __ ____  __ 
  / /_//_/// /_/// /_/// /_//      / /__/ / _ \/ // /\ \/ / 
 /____//_//____//_/   /_/         /____/_/_//_/\_,_/ /_/\_\ 


Reply to: