[JA] Re: UPDATE on mail attachment from Netherlands

  • From: thepccat@xxxxxxxx
  • To: juno_accmail@xxxxxxxxxxxxx
  • Date: Thu, 3 Oct 2002 11:21:31 -0700


When W32/Bugbear.A@mm shut off Zone Alarm, could you see that by looking
at the ZA icon in the system tray? What did you see? From what you wrote,
I assume you could turn it back on and it worked.

thepccat

On Thu, 3 Oct 2002 13:27:19 EDT bob.in.jersey@xxxxxxxx writes:

> It was "W32/Bugbear.A@mm", according to F-Prot.
> http://www3.ca.com/virusinfo/Virus.asp?ID=13233
> Still, must have been a variant, because the attach's base name 
> wasn't in
> the list there.  It was "pacha".
> It instilled itself in a DLL file, c:\windows\system\zaallpq.dll,
> which allowed it to spook ZoneAlarm and create the two .exe files
> described earlier.  Two things the .exe's did were to shutdown
> ZoneAlarm straightaway it opened (altho not corrupt or disable it,
> tho I reinstalled it =chust= in case...), 

________________________________________________________________
GET INTERNET ACCESS FROM JUNO!
Juno offers FREE or PREMIUM Internet access for less!
Join Juno today!  For your FREE software, visit:
http://dl.www.juno.com/get/web/.


To unsubscribe, send a message to ecartis@xxxxxxxxxxxxx with
"unsubscribe juno_accmail" in the body or subject.
OR visit //freelists.org
~*~



Other related posts: