On Wed, 05 Sep 2001 00:35:38 +0200,
Flip ter Biecht <[EMAIL PROTECTED]> wrote:

> Again two infected messages from Oscar Diaz.
>
> >From: "Oscar Diaz" <[EMAIL PROTECTED]>

> >X-Mailer: Microsoft Outlook Express 5.50.4133.2400
> >X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400

> >> Take a look to the attachment.

I have also received 2 from Oscar at GMX. The messages themselves
are only about 20k and the decoded binaries about 13k. F-Prot
identifies them as W95/Badtrans.A@mm.

        filename="searchURL.scr"
        filename="Humor.TXT.pif"

I renamed them to search.exe and humor.exe, but of course all I
get is "This program cannot be run in DOS mode".

I suppose someone should try and contact Oscar and give him some
instructions to get rid of the virus or tell him to stay off the
'Net until he does. I found some stuff on the Web similar to what
you posted here, but I don't use MS-Windows at all, so I don't
feel inclined to spend any more time with this.

I know I can block (bounce) his address at GMX, but I'm not sure
if I can filter (delete) it. I'm going there now to check.

Howard E.

-- 
DOS TCP/IP * <URL:http://www.ncf.ca/~ag221/dosppp.html>

Reply via email to