Subject Re: [IBO] VIRUS WARNING
Author Tri
If you can not check your infection with MATRIX use this:
Matrix do not let you connect to a lot of web pages with antivirus software

If you can see
www.symantec.com
then you are not infected

Other web pages that Matrix is aware and will keep you "blinded" are:
.............source code strings follow ........
wildlist.oil.esafe.cperfectsupcomplex.isHiServ.comhiserv.commetro.ch
beyond.com mcafee.com pandasoftwearthlink.inexar.com comkom.com
meditrade.mabex.com.cellco.com
symantec.com
successfulinforamp.nnewell.com singnet.com bmcd.com. abca.com.
nztrendmicrosophos.com maple.com. netsales.nf-secure.cF-Secure.
...........

Dorin Ionescu


----- Original Message -----
From: Dorin Ionescu
To: IBObjects@egroups.com
Sent: Tuesday, November 28, 2000 10:17 AM
Subject: [IBO] VIRUS WARNING


DO NOT OPEN HANSEN.SCR or any *.scr !!!

I received a message with subject
Fw: [IBO] (unknown):

and header
.................................
----- Original Message -----
From: Usuario Universo Online <cristiano_avelin@...>
Sent: Monday, November 27, 2000 5:12 PM
Subject: [IBO] (unknown)
X-Apparently-To: IBObjects@egroups.com
Received: (EGP: mail-6_3_1_2); 27 Nov 2000 15:18:54 -0000
Received: (qmail 24539 invoked from network); 27 Nov 2000 15:18:53 -0000
Received: from unknown (10.1.10.26) by l7.egroups.com with QMQP; 27 Nov 2000 15:18:53 -0000
Received: from unknown (HELO traven.uol.com.br) (200.231.206.184) by mta1 with SMTP; 27 Nov 2000 15:18:52 -0000
Received: from spock (200-227-172-120-as.acessonet.com.br [200.227.172.120]) by traven.uol.com.br (8.9.1/8.9.1) with SMTP id NAA14261 for <IBObjects@egroups.com>; Mon, 27 Nov 2000 13:12:32 -0200 (BRST)
Message-Id: <200011271512.NAA14261@...>
From: Usuario Universo Online <cristiano_avelin@...>
MIME-Version: 1.0
Mailing-List: list IBObjects@egroups.com; contact IBObjects-owner@egroups.com
Delivered-To: mailing list IBObjects@egroups.com
Precedence: bulk
Date: Mon, 27 Nov 2000 13:12:32 -0200 (BRST)
Reply-To: IBObjects@egroups.com
Subject: [IBO] (unknown)
Content-Type: multipart/mixed;
boundary="==i3.9.0oisdboibsd((kncd"
.................................

with Hanson.Scr as attachment.
Do Not Open
It is the Matrix virus
it has the folowing polimorphic names :

README.TXT.pif
I_wanna_see_YOU.TXT.pif
MATRiX_Screen_Saver.SCR
LOVE_LETTER_FOR_YOU.TXT.pif
NEW_playboy_Screen_saver.SCR
BILL_GATES_PIECE.JPG.pif
TIAZINHA.JPG.pif
FEITICEIRA_NUA.JPG.pif
Geocities_Free_sites.TXT.pif
NEW_NAPSTER_site.TXT.pif
METALLICA_SONG.MP3.pif
ANTI_CIH.EXE
INTERNET_SECURITY_FORUM.DOC.pif
ALANIS_Screen_Saver.SCR
READER_DIGEST_LETTER.TXT.pif
WIN_$100_NOW.DOC.pif
IS_LINUX_GOOD_ENOUGH!.TXT.pif
QI_TEST.EXE
AVP_Updates.EXE
SEICHO-NO-IE.EXE
YOU_are_FAT!.TXT.pif
FREE_xxx_sites.TXT.pif
I_am_sorry.DOC.pif
Me_nude.AVI.pif
Sorry_about_yesterday.DOC.pif
Protect_your_credit.HTML.pif
JIMI_HMNDRIX.MP3.pif
HANSON.SCR
F....._WITH_DOGS.SCR
MATRiX_2_is_OUT.SCR
zipped_files.EXE
BLINK_182.MP3.pif)

This virus will send to your friend an e-mail at 5 minutes after your normal e-mail message.

Dorin Ionescu
triada@...


eGroups Sponsor




[Non-text portions of this message have been removed]