|
PureBytes Links
Trading Reference Links
|
Although I have a filter for MetaStock ListServ posts, this message showed
up in my Inbox (because of the Reply-TO format). I started my Anti-Virus
program and clicked on the Happy99.EXE file. Immediately I got a
virus alert from NAV v5. The HAPPY99.EXE contains the HAPPY99.WORM
virus. BEWARE:
Print Virus Information
*********************************************************************
Virus Information
*********************************************************************
Virus Name: Happy99.Worm
Aliases: I-Worm.Happy
Infects: N/A
Likelihood: Common
Length: 10000 bytes
Characteristics Memory
Resident No
Triggered Event No
Size Stealth No
Encrypting No
Full Stealth No
Polymorphic No
Comments This worm modifies WSOCK32.DLL to send itself as
attachment when a posting is made to USENET or MAIL. Delete SKA.EXE and
SKA.DLL in WINDOWS\SYSTEM folder and replace WSOCK32.DLL with WSOCK32.SKA
in WINDOWS\SYSTEM folder
staffan wrote:
Name: Happy99.exe
Happy99.exe Type: unspecified type (application/octet-stream)
Encoding: x-uuencode
|