From: Bruce Markowitz (scosgt_at_worldnet.att.net)
Date: Fri Dec 20 2002 - 09:38:19 EST
Yes, it is a virus. Just delete it. As long as you do not run it, it won't
cause a problem
That one may be the Klez.32, or it may be something else, but it is most
certainly a virus
----- Original Message -----
From: "Dr. Jeffrey Race" <jrace_at_attglobal.net>
To: "Thinkpad Users Group" <thinkpad_at_stderr.org>
Cc: "Edgar Gunther" <egunther98_at_hotmail.com>; "Nathan Sokal"
<73507.247_at_compuserve.com>; "Dr. Jeffrey Race" <jrace_at_attglobal.net>
Sent: Friday, December 20, 2002 8:18 AM
Subject: [Thinkpad] OT: Mercy mission
> One of my friends is visiting here and I set up his Win98 machine on
> the broadband network at the long-term residence hotel he is staying
> at. As soon as I got home I found a message, clearly identifiable
> to the network I just put him on, which seems to be some kind of
> worm. The message consists of three parts
>
> - text file: This is a special excite game
> This game is my first work.
> You're the first player.
> I expect you would enjoy
> - html file consisting apparently of a message he received from
> someone in his IE browser mail client
> - INSTALL.EXE which I assume is the worm payload.
>
> I'm looking for advice how to identify the infection, how he can
> clean up, and how to prevent re-infection. (I assume delete IE
> and install Navigator--correct me on this.)
>
> I run OS/2 and never have to worry about these things so beg your
> indulgence to help my friend on this. Thanks for all advice and
> pointers to online resources.
>
> Jeffrey Race
>
This archive was generated by hypermail 2.1.3 : Thu Jan 23 2003 - 09:59:45 EST