yes, again,
I checked a virus site, it's certainly BadTrans, like a guy said on the list at first.
It's a trojan aiming at stealing passwords.
Removal tool at : http://www.claymania.com/badtrans-removal.html
Yves/ ----- Original Message ----- From: Yves Degoyon To: pd-list@iem.kug.ac.at Sent: Wednesday, November 28, 2001 1:22 PM Subject: Re: [PD] What I know about this f****ing worm
hi again,
I'm not too sure about virus identification because my anti-virus is quite old but I'm sure about the files removed.
Maybe, it's a new worm.
If it's "Magic Lantern", we're only spied by the F.B.I. !!!
cheers,
Yves/
PS : is there a "Bin Laden" virus already ??? I'm surprised it didn't appeared yet. ----- Original Message ----- From: Yves Degoyon To: pd-list@iem.kug.ac.at Sent: Wednesday, November 28, 2001 12:52 PM Subject: [PD] What I know about this f****ing worm
hi,
sorry, I was infected by this f****ing worm,
seemed to be FunLove, signature is :
1002sono: fsav (linux) virus (11828-54)
the scanning of my hard drive cleaned the following files :
c:\Windows\virscana.exe
c:\1002sono
c:\1017hist
c:\1020hist
Check if you've got them.
I will check a virus site to
know more about it.
cheers,
Yves/