ECN Forum
Posted By: sparky66wv Two Viri Double Post - 09/29/01 05:12 AM
This is a double post for better visibility:

An odd download screen appeared while checking on my own web site, I ran PC Cillian Virus Scan House Call and it found two viri. One was called "VBS.Homepage.A" and the other called "TROJ.NETBUSPP.A". The second was received while updating the server list for NIStime which sinc's my computer clock with the atomic clock.

If you have received an email from me saying the following, run a virus diagnostic program:

Subject: "Homepage"

Body:


Hi!

You've got to see this page! It's
really cool ;O)

Attachment: Homepage.HTML.vbs

It then checks for the following registry entry to see if email has already been sent out to all addresses in the address book:

HKCU\Software\An\Mailed

Go here for more: http://www.k7computing.com/newsinfo/Homepage.htm


Also,


Go here for a description of the TROJ NETBUS http://www.sophos.com/virusinfo/analyses/trojnetbus.html

My apologies if this has caused any harm.

-Virgil

[This message has been edited by sparky66wv (edited 09-29-2001).]
Posted By: electure Re: Two Viri Double Post - 09/29/01 09:21 AM
Virgil,
1st off, I didn't get one ...but:
The wording in the body of the first "homepage" e-mail even sounds like it was written by you ("really cool").
I would have opened it without a second thought.
THX

[This message has been edited by electure (edited 09-29-2001).]
© ECN Electrical Forums