×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

aol email virus???

aol email virus???

aol email virus???

(OP)
The other day i recieved this email with the subject "this is great" and "whats so funny"... both of them had email attachments... now i was stupid and i downloaded the email and it has now messed up my aol... also when i email someone it sends them the virus along with my email so the person i send a email gets my mail and the virus mail... it does not get detected by norton antivirus ... what is this virus and how do i get rid of it????

RE: aol email virus???

Is your norton up to date?
Look in the FAQ list for virus help.

Ed Fair
 efair@atlnet.com
 
Any advice I give is my best judgement based on my interpretation of the facts you supply.

Help increase my knowledge by providing some feedback, good or bad, on any advice I have given.

RE: aol email virus???

You should contact symantec WWW.Symantec.com to get help from there if it is a new Virus they are interested on the Signature.

hnd
hasso55@yahoo.com
 
 

RE: aol email virus???

Here is what I got from Computer Associates.  The website for their Virus Encyclopedia is http://www.cai.com/virusinfo/encyclopedia/.

Win32.Funso worm (also known as I-Worm.Menace)
Win32.Funso worm arrives in an email that has one of the following subject lines:

Fwd: This is great! =)
Fwd: This is hilarious! =)

The message body is:

You guys have to download this! This really is funny!

The attachment is called "sofunny.exe".

When run, the worm displays the following fake error message:



It copies itself to "C:\WINDOWS\SOFUNNY.exe" and "C:\WINDOWS\msdos423.exe" and adds a key to the registry so that it is loaded every time Windows starts:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\msdos423="c:\windows\msdos423.exe"

Note that it always uses the directory "C:\WINDOWS" even if Windows is installed in a different location.

The worm also creates a file called "C:\WINDOWS\msdos423.ini" which it uses to keep track of its progress. Initially this file contains the following:

[Setup]
Copied=True

The worm sends itself to other people using the AOL client software. It also steals AOL passwords and attempts to send them to a third party, presumably the worm author, using one of the following mail servers:

mail.yahoo.com
mail.hotmail.com
mail.angelfire.com

Thanks,
         Vince

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close