Re: [Declude.Virus] Something interesting..

2003-11-07 Thread Jim Matuska
Just submit the file to Symantec and they should be able to tell you within
a couple hours if it is dangerous or not.

Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message - 
From: Jeff Maze - Hostmaster [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, November 07, 2003 11:46 AM
Subject: RE: [Declude.Virus] Something interesting..


 I'm debating backing up all my info and running the exe just to see if
 anything happens.  I have my laptop ghosted and will be back up and
running
 in about 30 minutes..  Plus, the software firewall I run would let me know
 if anything tries to connect to anything..

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette
 Sent: Friday, November 07, 2003 1:54 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.Virus] Something interesting..


 Yet another compelling reason to block zip files.

 -Original Message-
 From: Jeff Maze - Hostmaster [mailto:[EMAIL PROTECTED]
 Sent: Friday, November 07, 2003 10:36 AM
 To: [EMAIL PROTECTED]
 Subject: [Declude.Virus] Something interesting..


 I just got two e-mails in our spam account.  Heres their info:

 From: [EMAIL PROTECTED]
 Subject: Hi
 Hi again. I am very sorry i took so long to respond. I was away for a =
 couple of days with my friend emmy. We took a little tour around the b=
 eautiful city of ours, i have visited lots of nice places, and seen lo= ts
 of nice ppl. Well anyways, here is the free attachment that i promi= sed.
 its mostly about me. just download it, unzip and run. easy as 1,2= ,3...
 Enjoy.=20


 It also came with a MyMovie.zip file that was neither picked up by Norton,
 nor F-Prot on the server.  Any ideas?  Within the zip file is a file
called
 My-Private-H0t-Movies.exe.


 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just
 send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just
 send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Something interesting..

2003-11-07 Thread Pete McNeil
Wdialupd / Porndial -

http://www.f-secure.com/v-descs/wdialupd.shtml

Probably a variant.

_M

|-Original Message-
|From: [EMAIL PROTECTED] 
|[mailto:[EMAIL PROTECTED] On Behalf Of Jeff 
|Maze - Hostmaster
|Sent: Friday, November 07, 2003 2:47 PM
|To: [EMAIL PROTECTED]
|Subject: RE: [Declude.Virus] Something interesting..
|
|
|I'm debating backing up all my info and running the exe just 
|to see if anything happens.  I have my laptop ghosted and will 
|be back up and running in about 30 minutes..  Plus, the 
|software firewall I run would let me know if anything tries to 
|connect to anything..
|
|-Original Message-
|From: [EMAIL PROTECTED] 
|[mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette
|Sent: Friday, November 07, 2003 1:54 PM
|To: [EMAIL PROTECTED]
|Subject: RE: [Declude.Virus] Something interesting..
|
|
|Yet another compelling reason to block zip files.  
|
|-Original Message-
|From: Jeff Maze - Hostmaster [mailto:[EMAIL PROTECTED]
|Sent: Friday, November 07, 2003 10:36 AM
|To: [EMAIL PROTECTED]
|Subject: [Declude.Virus] Something interesting..
|
|
|I just got two e-mails in our spam account.  Heres their info:
|
|From:  [EMAIL PROTECTED]
|Subject:   Hi
|Hi again. I am very sorry i took so long to respond. I was 
|away for a = couple of days with my friend emmy. We took a 
|little tour around the b= eautiful city of ours, i have 
|visited lots of nice places, and seen lo= ts of nice ppl. Well 
|anyways, here is the free attachment that i promi= sed. its 
|mostly about me. just download it, unzip and run. easy as 1,2= 
|,3... Enjoy.=20
|
|
|It also came with a MyMovie.zip file that was neither picked 
|up by Norton, nor F-Prot on the server.  Any ideas?  Within 
|the zip file is a file called My-Private-H0t-Movies.exe.
|
|
|---
|[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Something interesting..

2003-11-07 Thread paul
 I'm debating backing up all my info and running the exe just to see if
 anything happens.  I have my laptop ghosted and will be back up and
running
 in about 30 minutes..  Plus, the software firewall I run would let me know
 if anything tries to connect to anything..

Probably just a dialer, Of course, we all know not to open EXEs we don't
know the origin of. =) The USERS usually don't, but.

If you DO run it, let us know what you find out.

Paul


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Something interesting..

2003-11-07 Thread Andy Schmidt
Yawn...

 I'm debating backing up all my info and running the exe just to see if
anything happens. 

How about first searching the known viruses:
http://vil.nai.com/vil/content/v_100807.htm


Best Regards
Andy Schmidt

HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Something interesting..

2003-11-07 Thread Kami Razvan
Oh Oh...

 I'm debating backing up all my info and running the exe just to see 
 if
anything happens.  

Remind me not to ever give you a loaded gun... :)

Regards,
Kami

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt
Sent: Friday, November 07, 2003 4:31 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] Something interesting..

Yawn...

 I'm debating backing up all my info and running the exe just to see 
 if
anything happens. 

How about first searching the known viruses:
http://vil.nai.com/vil/content/v_100807.htm


Best Regards
Andy Schmidt

HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.