[fptex] Virus going around???????

na199 at worldonline.de na199 at worldonline.de
Wed Mar 3 12:30:07 CET 2004


Hello,

The last days I got some mails from the e.g. following senders

StaW at gust.org.p

OR

Fabrice.Popineau at supelec.f

and a third one had Sebastian Rahtz as sender, if I remember right.

(All sender-addresses appear to be completely as we know them.

with contents like this

Re: [fptex] Weeeeee! ;)))

OR

I  don't  bite, weah! 

and in each case with a  password (needed to open the zip-file), and 
an attachment  like "Text.zip" or "Readme.zip". Something we TeXies 
would open!


Once you open the zip-file, you get an exe-file with a name like 
"yxcpx.exe" (the name differs), size  around 21k.

Once started this program tries to open in Internet connection (which 
on my computer - my luck - must be confirmed) and after cancelling 
the dialin-process evidently runs for a long time (looking for what? 
As a guess: for the address file of WIN98-Outlook - which happenly I 
don't use)

I could not find any damage and it seems I got rid of the problem 
(looking up which program were started automatically when switching 
the computer ON and deleting the strange one), but only time will 
show if I was lucky.

So be aware.

Henning 




More information about the fptex mailing list