Hello,
I am Phillip Powers, and this WAS a virus.
Do NOT open any attachments from me in the last couple of days.
This is what I get for letting a friend check his email on my computer. Not
very good idea.
If you DID open an attachment from me, and it said something like "File
Corrupt," you need to get a virus scanner to clean your computer.
OR
You can delete the following files and registry entries:
Delete <windows system dir>\kern32.exe
Delete <windows system dir>\hksdll.dll
De;ete <windows system dir>\CP_23421.NLS
Delete <windows dir>\inetd.exe
Also from registry HKLM/Software/Microsoft/Windows/CurrentVersion/RunOnce:
Anything that references any of the above files.
Also from Win.Ini, anything that references any of the above files listed in
the Run key.
I apologize for this.
Phillip
----- Original Message -----
From: "Thomas Jentzsch" <tjentzsch@xxxxxx>
To: <stella@xxxxxxxxxxx>
Sent: Tuesday, July 17, 2001 4:23 AM
Subject: [stella] OT: Virus at stellalist ?
> Hi,
> I got a "funny" reply for my last post (Re: [stella] Another programming
question)to the list. I posted from my web.de account and only received this
reply on my forwarded address at my office. Fortunately the virus-scanner of
my company is working very well :)
> <REPLY>
>
> This is an automated message
>
> This mail contained a virus. Virus-Id:
> >>> Virus 'W32/Badtrans-A'
>
> =========================================================
> ENVELOPPE INFORMATION:
> FROM = diabolus@xxxxxxxx
> RCPT = tjentzsch@xxxxxxxxxxxx
> =========================================================
> HEADER INFORMATION:
> Received: from mailgate3.cinetic.de(212.227.116.80) by gate.bauboden.com
(1.0 SMTP-GW) with SMTP; Tue Jul 17 09:44:32 2001
> Received: from mx08.web.de (mx08.dlan.cinetic.de [172.20.1.47])
> by mailgate3.cinetic.de (8.11.2/8.11.2/SuSE Linux 8.11.0-0.4) with SMTP id
f6H7iWg11506
> for <tjentzsch@xxxxxxxxxxxx>; Tue, 17 Jul 2001 09:44:32 +0200
> Received: from imf14bis.bellsouth.net by mx08.web.de with smtp
> (freemail 4.2.2.2 #10) id m15MPWx-0089njA; Tue, 17 Jul 2001 09:44 +0200
> Received: from bob ([65.80.224.87]) by imf14bis.bellsouth.net
> (InterMail vM.5.01.01.01 201-252-104) with SMTP
> id <20010717074522.SCUA19651.imf14bis.bellsouth.net@bob>
> for <tjentzsch@xxxxxx>; Tue, 17 Jul 2001 03:45:22 -0400
> Message-ID: <000301c10e93$f7d66990$0501a8c0@bob>
> From: "Phillip Powers" <diabolus@xxxxxxxx>
> To: <tjentzsch@xxxxxx>
> Subject: Re: Re: [stella] Another programming question
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="----=_NextPart_000_0000_01C10E72.6FD671F0"
> X-Mailer: Microsoft Outlook Express 5.00.2919.6700
> X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
> Date: Tue, 17 Jul 2001 03:45:23 -0400
>
> =========================================================
>
>
>
> Your GeNUGate Mail Delivery Agent
>
>
> </REPLY>
> Could there be a virus involved somewhere in the biglist server?
> Any good explanations what happened??
> And who ist Phillip Powers???
>
> Have fun!
> Thomas
> _______________________________________________________
> Thomas Jentzsch | *** Every bit is sacred ! ***
> tjentzsch at web dot de |
>
>
>
____________________________________________________________________________
__
> Fast alle Fluege koennen Ihnen egal sein. Einer nicht: Ihrer!
> Flug.de hat ihn: http://flug.de/sb/?PP=0-5-100-105-6
>
>
> -
> Archives (includes files) at http://www.biglist.com/lists/stella/archives/
> Unsub & more at http://www.biglist.com/lists/stella/
-
Archives (includes files) at http://www.biglist.com/lists/stella/archives/
Unsub & more at http://www.biglist.com/lists/stella/
