why I love unix
Jun. 14th, 2002 01:14 pmone of the companies I applied to just sent me a virus... it's one of the ones where windows hides the extention... the name of it is New_napster.DOC.src (the true name) it will show up as New_Napster.doc if you are running dos...
I am looking through the code to it it looks pretty nasty.. I will spare you cuting and pasting the etire thing in hex here but here are some of th tidbits:
the program goes through your recieved mail and replies with one of many different things:
> Take[looklth^MtBchment. #^@,
This is the first indication to me that it was a virus... the e-mail she sent said "take a look at this attachment" and you can see it here plain as day... (well almost ;-)
now down a little lower you will see this:
.KERNEL32.DLL.MSVCRT.dll.USER32.dll..LoadLibraryA..GetProcAddress..ExitProcess...free..wsprin tfA
now why in the hell would it be making changes to this file? hmmm...
if you stick your hand in fire you should expect to get burned if you run windows... well you get the rest :-)
I am looking through the code to it it looks pretty nasty.. I will spare you cuting and pasting the etire thing in hex here but here are some of th tidbits:
the program goes through your recieved mail and replies with one of many different things:
> Take[lookl
This is the first indication to me that it was a virus... the e-mail she sent said "take a look at this attachment" and you can see it here plain as day... (well almost ;-)
now down a little lower you will see this:
.KERNEL32.DLL.MSVCRT.dll.USER32.dll..LoadLibraryA..GetProcAddress..ExitProcess...free..wsprin tfA
now why in the hell would it be making changes to this file? hmmm...
if you stick your hand in fire you should expect to get burned if you run windows... well you get the rest :-)
no subject
Date: 2002-06-14 12:46 pm (UTC)