RE: [PHP] Very important.

From: Date: Wed, 25 Apr 2001 07:33:02 +0000
Subject: RE: [PHP] Very important.
Groups: php.general 
Request: Send a blank email to php-general+get-50244@lists.php.net to get a copy of this message
This virus was reply to each email sent. I, that day, have posted a reply here to someone. It reached some poor php-general list subscriber and it's outlook (or whatever) has replied to me personally with that .EXE file attached. I didn't open it of course since I receive such a staff at least twice a day (no kidding, I am subscribed to dozens of lists) I think, removing the guy of the list would help us to avoid meeting the virus on this list again. Sincerely, Maxim Maletsky Founder, Chief Developer PHPBeginner.com (Where PHP Begins) maxim@phpbeginner.com www.phpbeginner.com -----Original Message----- From: Padraic Tynan [mailto:davinxtk@mediaone.net] Sent: Wednesday, April 25, 2001 6:29 AM To: php-general@lists.php.net Subject: [PHP] Very important. Hi. Yesterday an email-virus entitled Emanuel was sent out over this list, and I am not sure by who. It came in the form of Emanuel.exe, and had an icon resembling that of a standalone flash projector file (pink diamond with a white multi-pointed asterisk-type thing in the middle). This virus appears to be a backorifice or netbus style virus, and adds something to a system file that makes it so that *every* time you try to launch a program, it launches "Wintask.exe", which is *not* an official task, despite the name. It puts a green ICQ flower in your taskbar, and if you click it, a button pops up that says "Nunca <bla bla> esta button". The <bla bla> is because I forget the word for "push" in spanish, and I'm not about to open this program again -- It translates to "NEVER PUSH THE BUTTON" -- and trust me, *don't*, this, i have found, is what activates the virus. I may have lost several weeks of work to this virus, and I advise you all to watch out, as it was likely sent inadvertantly.

« previous php.general (#50244) next »