from [EMAIL PROTECTED] (Howard Eisenberger):
www.sexyfun.net is an anti-virus site. The domain was purchased in
response to the spread of the Snowhite worm which always contains
the phony From: Hahaha <[EMAIL PROTECTED]>.
I ran joke.exe in pure DOS once (it's a DOS program) and gave my
PC the Hubris virus which was recognized by F-Prot. Of course, it
is benign in DOS, since the way it works is to modify wsock32.dll.
I simply got rid of it with a warm reboot.
(end of quote)
Those Snowhite messages always had Return-Path: <>
What does joke.exe look like when it runs in pure DOS? I guess it did no damage
to the boot sector or partition table? What happens when joke.exe can't play a
joke on WSOCK32.DLL or the Windows Registry, because these don't exist? I once
downloaded Win32s for OS/2, then I had D:\OS2\MDOS\WINOS2\WSOCK32.DLL or
D:\OS2\MDOS\WINOS2\SYSTEM\WSOCK32.DLL , I forget which, it's all obliterated now
as a result of the hard disks crash, and I never had any software that would
make use of this WSOCK32.DLL. I guess those Win32 viruses would not guess to
look to such a strange directory for WSOCK32.DLL, or maybe OS/2 would intercept
the virus and halt the program?
