from Edenyard:
Over the weekend, the following mesage was received on an Arachne DOS
PC. We don't recognise any of the content of the message, although we
know the company from which it apparently originated. Is it a virus?
====== Message:===
Subject: Fw: HYPERLINK l "A" Work Information .
HYPERLINK \l "B" Hot List
AUTOTEXT bullet Error! AutoText entry not defined. HYPERLINK \l "C" Contact
Information
AUTOTEXT bullet Error! AutoText entry not defined.
[Attached file: AutoText.bat]
[Attached file: Centered.doc]
[Attached file: STRTRHTP.GIF]
==================
Thanks for any clues!
All the best,
Gerald.
(end of quote)
Were those AUTOTEXT bullet Errors from viewing with Arachne, or were they
actually part of the message? Message looks screwy. You might query the sender
if you can find a return address. Maybe the sending computer has/had a virus.
Are those file names the actual names in the attachment subheaders, or are they
truncated by Arachne/Insight to conform to DOS 8.3 limitations?
You might want to extract AutoText.bat to see if it's really a .bat, or if it's
an .exe (nontext, begins with MZ, may contain the phrase "This program cannot be
run in DOS mode" if it's a Windows executable), but don't run it. There was a
discussion on this list about an attachment Majority.bat which was really an
executable.
Is Centered.doc an MS-Word file? If so, it could contain a macro virus.
You might also extract and view the STRTRHTP.GIF attachment as text, see if you
can find a GIF header, or if it too begins with MZ. Name could possibly have
been truncated from STRTRHTP.GIF.EXE?
