<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 5.50.4134.600" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>yes, again,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I checked a virus site,</FONT></DIV>
<DIV><FONT face=Arial size=2>it's certainly BadTrans, </FONT></DIV>
<DIV><FONT face=Arial size=2>like a guy said on the list at first.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>It's a trojan aiming at stealing
passwords.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Removal tool at :</FONT></DIV>
<DIV><FONT face=Arial size=2><A
href="http://www.claymania.com/badtrans-removal.html">http://www.claymania.com/badtrans-removal.html</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Yves/</FONT></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=ydegoyon@free.fr href="mailto:ydegoyon@free.fr">Yves Degoyon</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=pd-list@iem.kug.ac.at
href="mailto:pd-list@iem.kug.ac.at">pd-list@iem.kug.ac.at</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, November 28, 2001 1:22
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [PD] What I know about this
f****ing worm</DIV>
<DIV><BR></DIV>
<DIV><FONT face=Arial size=2>hi again,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I'm not too sure about virus
identification</FONT></DIV>
<DIV><FONT face=Arial size=2>because my anti-virus is quite old</FONT></DIV>
<DIV><FONT face=Arial size=2>but I'm sure about the files
removed.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Maybe, it's a new worm.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>If it's "Magic Lantern", we're only spied by the
F.B.I. !!!</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>cheers,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Yves/</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>PS : is there a "Bin Laden" virus already
???</FONT></DIV>
<DIV><FONT face=Arial size=2>I'm surprised it didn't appeared
yet.</FONT></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=ydegoyon@free.fr href="mailto:ydegoyon@free.fr">Yves Degoyon</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=pd-list@iem.kug.ac.at
href="mailto:pd-list@iem.kug.ac.at">pd-list@iem.kug.ac.at</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, November 28, 2001
12:52 PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [PD] What I know about this
f****ing worm</DIV>
<DIV><BR></DIV>
<DIV><FONT face=Arial size=2>hi,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>sorry, I was infected by this f****ing
worm,</FONT></DIV>
<DIV><FONT face=Arial size=2>seemed to be <STRONG>FunLove</STRONG>,
signature is :</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><STRONG>1002sono: fsav (linux) virus
(11828-54)<BR></STRONG></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT><FONT face=Arial size=2>the scanning of
my hard drive cleaned the following files :</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial
size=2><STRONG>c:\Windows\virscana.exe</STRONG></FONT></DIV>
<DIV><FONT face=Arial size=2><STRONG>c:\1002sono</STRONG></FONT></DIV>
<DIV><FONT face=Arial size=2><STRONG>c:\1017hist</STRONG></FONT></DIV>
<DIV><FONT face=Arial size=2><STRONG>c:\1020hist</STRONG></FONT></DIV>
<DIV><FONT face=Arial size=2><STRONG></STRONG></FONT> </DIV>
<DIV><FONT face=Arial size=2>Check if you've got them.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I will check a virus site to</FONT></DIV>
<DIV><FONT face=Arial size=2>know more about it.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>cheers,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial
size=2>Yves/</DIV></BLOCKQUOTE></BLOCKQUOTE></FONT></BODY></HTML>