hugme: (Default)
[personal profile] hugme
one of the companies I applied to just sent me a virus... it's one of the ones where windows hides the extention... the name of it is New_napster.DOC.src (the true name) it will show up as New_Napster.doc if you are running dos...

I am looking through the code to it it looks pretty nasty.. I will spare you cuting and pasting the etire thing in hex here but here are some of th tidbits:

the program goes through your recieved mail and replies with one of many different things:

> Take[looklth^MtBchment. #^@,
This is the first indication to me that it was a virus... the e-mail she sent said "take a look at this attachment" and you can see it here plain as day... (well almost ;-)

now down a little lower you will see this:

.KERNEL32.DLL.MSVCRT.dll.USER32.dll..LoadLibraryA..GetProcAddress..ExitProcess...free..wsprin tfA

now why in the hell would it be making changes to this file? hmmm...

if you stick your hand in fire you should expect to get burned if you run windows... well you get the rest :-)

Profile

hugme: (Default)
hugme

April 2011

S M T W T F S
     12
3456789
10111213141516
17 181920212223
24252627282930

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags
Page generated Apr. 8th, 2026 10:25 pm
Powered by Dreamwidth Studios