Searching \ for 'FYI : New e-mail virus [OT][ADMIN]' in subject line. ()
Make payments with PayPal - it's fast, free and secure! Help us get a faster server
FAQ page: piclist.org/techref/index.htm?key=
Search entire site for: 'New e-mail virus [OT][ADMIN]'.

Truncated match.
PICList Thread
'FYI : New e-mail virus [OT][ADMIN]'
2000\05\05@151637 by Dan Creagan

flavicon
face
Actually, it does replace common picture formats, but it also renames them
from <filename.jpg> to <filename.jpg.vbs>

Normal picture viewers would not be affected and would not spread the virus.
What would happen in Windows is a GUI user would try to click on the
filename (from My Computer or Explorer) thinking that it was the old file
(not noticing the incorrect extension). Windows would see the vbs extension
and run the scripting host - which would infect the system.  If the (l)user
would attempt to load the file from the file dialog of, say, Paint Shop Pro,
it would just complain it didn't understand the file format.

I think you have to almost try to get this sucker to infect your system.
Amazing that it caused so much damage.  Are we all so starved for
affection/ego trips that we absolutely MUST open something as lame as
ILOVEYOU.txt.vbs ????

=============================================

In the case of this worm, it replaces every JPG it can find with a copy of
it's
vbe.  If you have JPG viewer that executes VBEs (does such a thing exist?),
and
someone sent you a worm effected JPG, you'd be infected.

-Mike

2000\05\05@182234 by paulb

flavicon
face
Dan Creagan wrote:

> What would happen in Windows is a GUI user would try to click on the
> filename (from My Computer or Explorer) thinking that it was the old
> file (not noticing the incorrect extension).

 Which by the doofus (default) settings, Windoze attempts to hide from
you.

> I think you have to almost try to get this sucker to infect your
> system.

 I think that's fair comment.
--
 Cheers,
       Paul B.

More... (looser matching)
- Last day of these posts
- In 2000 , 2001 only
- Today
- New search...