Virus going around???????

[email protected] Wed, 03 Mar 2004 12:30:07 +0100
Newsgroups gmane.comp.tex.fptex
Message-ID <4045CFCF.15069.2FE2E6@localhost>
Hello,

The last days I got some mails from the e.g. following senders

[email protected]

OR

[email protected]

and a third one had Sebastian Rahtz as sender, if I remember right.

(All sender-addresses appear to be completely as we know them.

with contents like this

Re: [fptex] Weeeeee! ;)))

OR

I  don't  bite, weah! 

and in each case with a  password (needed to open the zip-file), and 
an attachment  like "Text.zip" or "Readme.zip". Something we TeXies 
would open!


Once you open the zip-file, you get an exe-file with a name like 
"yxcpx.exe" (the name differs), size  around 21k.

Once started this program tries to open in Internet connection (which 
on my computer - my luck - must be confirmed) and after cancelling 
the dialin-process evidently runs for a long time (looking for what? 
As a guess: for the address file of WIN98-Outlook - which happenly I 
don't use)

I could not find any damage and it seems I got rid of the problem 
(looking up which program were started automatically when switching 
the computer ON and deleting the strange one), but only time will 
show if I was lucky.

So be aware.

Henning