The Penguin

2002-11-21 Thread Orin Rehorst
Weird. User had notepad popup and display this message.

Hi, guess you have got the message. I have kept a list of files that I have
infected under this. If you are smart enough just reverse back the process.
i could have done far better damage, i could have even completely wiped your
harddisk. Remember this is a warning  get it sound and clear... - The
Penguin

Nothing I could find on Trend or Norton web sites about it. Any ideas? TIA

Regards,
Orin

Orin Rehorst
Port of Houston Authority
(Largest U.S. port in foreign tonnage)
e-mail:  [EMAIL PROTECTED]
Phone:  (713)670-2443
Fax:  (713)670-2457
TOPAS web site: www.homestead.com/topas/topas.html



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: The Penguin

2002-11-21 Thread Tom Meunier
I found it at both Trend and Symantec, actually.  Take your pick.

http://www.symantec.com/avcenter/venc/data/w32.prolin.worm.html 
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_PRO
LIN.A 


-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED]] 
Posted At: Thursday, November 21, 2002 8:27 AM
Posted To: MSExchange Mailing List
Conversation: The Penguin
Subject: The Penguin


Weird. User had notepad popup and display this message.

Hi, guess you have got the message. I have kept a list of files that I
have infected under this. If you are smart enough just reverse back the
process.
i could have done far better damage, i could have even completely wiped
your harddisk. Remember this is a warning  get it sound and clear... -
The Penguin

Nothing I could find on Trend or Norton web sites about it. Any ideas?
TIA

Regards,
Orin

Orin Rehorst
Port of Houston Authority
(Largest U.S. port in foreign tonnage)
e-mail:  [EMAIL PROTECTED]
Phone:  (713)670-2443
Fax:  (713)670-2457
TOPAS web site: www.homestead.com/topas/topas.html



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: The Penguin

2002-11-21 Thread Dale Geoffrey Edwards
Sybari (Antigen) has this up on their archives.  It dates back to 11/00.  If
you are blocking .exe files, you should be fine.  If you want to take a look
at it, here is the link:

http://www.sybari.com/alerts/

Then do a search for The Penguin

Gèoff...



-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, November 21, 2002 9:27 AM
To: Exchange Discussions
Subject: The Penguin


Weird. User had notepad popup and display this message.

Hi, guess you have got the message. I have kept a list of files that I have
infected under this. If you are smart enough just reverse back the process.
i could have done far better damage, i could have even completely wiped your
harddisk. Remember this is a warning  get it sound and clear... - The
Penguin

Nothing I could find on Trend or Norton web sites about it. Any ideas? TIA

Regards,
Orin

Orin Rehorst
Port of Houston Authority
(Largest U.S. port in foreign tonnage)
e-mail:  [EMAIL PROTECTED]
Phone:  (713)670-2443
Fax:  (713)670-2457
TOPAS web site: www.homestead.com/topas/topas.html



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]