Andrew,
I hope it really WAS just a screwup and nothing malicious. Just for grins, I
went ahead and opened the schematic file on an isolated machine and found that
it delivered a nifty little trojan...
I just got done cleaning my system and documenting what I found along the way.
It did appear to be benign, but was a little disturbing nonetheless. It
appeared to deliver a "phone home" type trojan as it places an application in
the system startup (and a few other places) that attempts to go out to the
'net. (Thanks ZoneAlarm!) It kind of smelled like a DDOS client to me. Any
comments?
Anyone else on the list who might open this file by mistake and want details of
what I found -- please feel free to contact me directly.
Matt Pobursky
Maximum Performance Systems
On Tue, 13 Feb 2001 00:28:29 -0500, Andrew J Jenkins wrote:
>Sorry folks,
>
>I just sent a file to the group instead of my work address. Too late in the
>evening...Many apologies. It's benign, but hopefully the forum admin can kill
>the message before it's resent...
>
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* This message sent by: PROTEL EDA USERS MAILING LIST
*
* Use the "reply" command in your email program to
* respond to this message.
*
* To unsubscribe from this mailing list use the form at
* the Association web site. You will need to give the same
* email address you originally used to subscribe (do not
* give an alias unless it was used to subscribe).
*
* Visit http://www.techservinc.com/protelusers/subscrib.html
* to unsubscribe or to subscribe a new email address.
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
________________________________________________________
To leave the EDAFORUM discussion list, send a email with
'leave edaforum' in the body to '[EMAIL PROTECTED]'
More Information : http://www.dolist.net
