----- Original Message -----
From: "Dilwyn Jones" <[EMAIL PROTECTED]>
To: "QL Users List" <[EMAIL PROTECTED]>
Sent: Saturday, March 27, 2004 12:27 AM
Subject: [ql-users] 41K virus
> While downloading my emails tonight I noticed it was slow and the
> stats said I seemed to be sending about 10 times as much data as I was
> sending. Yes, I had one of the hundreds of 41K viruses ("message
> failure") worms or virus, whatever they were, probably emailing
> everyone in sight from my address book.
>
> AVG's removed it now, but if anyone gets one of those emails from me
> DON'T open it. Don't even preview it (Outlook Express users turn off
> your preview pane...that's how I got caught out)
>
> In some emails, there is an attachment of length 41KB or 42KB, in
> other ones, looking at th email properties does not show an
> attachment, but the email is 42KB long.
>
Yes I have started to receive emails asking me to read a document.
I have saved it to disc and unzipped on a QL. (Quite safe)
It seems to contain an executable file called document.txt, which of course
is activated when you click on it to read it.
It seems as though it is a file which installs itself as a replacement of
kernel.DLL.
What it does after that somebody else can establish but probably spreads a
virus or hijacks your machine.
Now kernel.DLL does not exist on Windows95 but does on Windows98 and
probably every subsequent version of Windows.
_______________________________________________
QL-Users Mailing List
