CI Travel X-CYBERsitter-NoXMail: Passed - Adult: 0 (Req: 18) Spam: 5 (Req: 18) Tot: 5 (Req: 20) X-RBL-Warning: XBL: 163.41.34.208.xbl.selwerd.cx. X-Declude-Sender: [EMAIL PROTECTED] [208.34.41.163] X-Declude-Spoolname: D0b76652e03caa7c8.SMD X-Note: This E-mail was scanned for viruses by Declude Virus (www.declude.com) X-NRecips: 1 X-Reverse-IP: 163.41.34.208.in-addr.arpa X-Weight: 2 (XBL, BADHEADERS, CURRENT, HEUR1) X-Country-Chain: UNITED STATES->destination. Precedence: bulk Sender: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED]
Hello, Tuesday, December 3, 2002, 2:39:49 PM, you wrote: John> Any one see how this is passed through e-mail yet? This is about all I have seen. ===============Snip from SearchSecruity.com=========== VENDOR REPORTS NEW STRAIN OF CHERNOBYL VIRUS | News: CNET Panda Software said it has detected a new strain of the Chernobyl virus, a piece of malicious code that could damage a computer's BIOS chips and motherboards, rendering them unusable. Panda said the new strain has not been seen in the wild, and it has not spread. Chernobyl activates its payload on the second day of every month. The original activates on April 26, the anniversary of the Chernobyl nuclear disaster. Other antivirus companies, however, question Panda's announcement and caution against "crying wolf." ======================================================== Now this one looks bad. I am blocking .pif files but not sure what the .ceo is about. The only CEO's don't usally infect anything just slow stuff down. :) I guess i need to find that link on file types. =============================== WINEVAR DISABLES ANTIVIRUS, TRIES TO DELETE FILES | News: CNET Antivirus companies are warning against the Winevar worm that attacks Windows computers with dangerous payloads that could cost users valuable data. Winevar spreads via e-mail, attaching itself as a .pif or .ceo file arriving from fictional organizations. If opened, Winevar tries to shut down antivirus programs and also attempts to delete every file on the computer. =================================== -- Best regards, ~Paul~ mailto:[EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus/McAfee] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
