[JA] Re: UPDATE on mail attachment from Netherlands
- From: terumoth@xxxxxxxx
- To: juno_accmail@xxxxxxxxxxxxx
- Date: Fri, 4 Oct 2002 20:28:39 -0400
Now THATS interesting. I remember zonealarm disappearing once before I
lost surfing ability. And in Juno I could (seemingly) log in, but the
timer would stay at 0:00 all the time i stayed online.....unable to go
anywhere. Same with Bellshouth account. hummmm!?
But the strange thin is that Bellsouth tried to get me connected and I
realized that my networking ability was gone. Also, anytime I tried to
get into networks, no matter what I did, it told me that the
'administrator' of that machine (ME BTW!) had taken away my permissions!
Ended up I have need to re-install Microsoft network stuff, but now CD
doesn't work.
Anyway, I am used to not having web abilities now. Its been several
month's. So now i am learning much new stuff email wise.
trade off...
laz
*******************************
It was "W32/Bugbear.A@mm", according to F-Prot.
http://www3.ca.com/virusinfo/Virus.asp?ID=13233
Still, must have been a variant, because the attach's base name wasn't in
the list there. It was "pacha".
It instilled itself in a DLL file, c:\windows\system\zaallpq.dll,
which allowed it to spook ZoneAlarm and create the two .exe files
described earlier. Two things the .exe's did were to shutdown
ZoneAlarm straightaway it opened (altho not corrupt or disable it,
tho I reinstalled it =chust= in case...), and to spook our domain-
name-system (not sure how it did that, since that's handled
dynamically by Juno) so we couldn't surf anywhere, even though we
could still start and log onto Juno.
--
BOB
________________________________________________________________
GET INTERNET ACCESS FROM JUNO!
Juno offers FREE or PREMIUM Internet access for less!
Join Juno today! For your FREE software, visit:
http://dl.www.juno.com/get/web/.
To unsubscribe, send a message to ecartis@xxxxxxxxxxxxx with
"unsubscribe juno_accmail" in the body or subject.
OR visit //freelists.org
~*~
Other related posts:
