[sdiy] definate virus problem with Kolaric
Jaco Sloof NewbieSynthBuilder
jacosloof at yahoo.com
Wed Jan 23 19:25:22 CET 2002
can this virus also infect my system if i'm using a web-based mail?
like ehh, mail.yahoo.com?
just good to know, btw, no kernel32.exe on my system, nor KDLL.DLL
--- Theo <t.hogers at home.nl> wrote:
> There is a ongoing BADTRANS worm infection on the SDIY list.
> Probably pp keep infecting each other over and over.
> (Among other things) Badtrans sends replies to unanswered mail in
> you
> in box, therefore it is kind of hard to exterminate from a mailing
> list.
> Even when the worm can't spread though the list itself.
>
> Please _EVERY ONE_ on the windos platform, any variation.
> Don't care about how perfect your virus protection/firewall is,
> this will only cost you a minute, so PLEASE.
> Check if there is a file named KERNEL32.EXE in your windows system
> directory.
> If the file is there you are infected with badtrans.
> Mind _.exe_ NOT _.dll_ which is you windos kernel, you do want to
> keep that
> one.
>
> To clean:
> Hard reset your PC and press F8 to start in dos mode (don't use the
> start
> menu!!)
> Go to your windows system dir; delete KERENEL32.EXE and KDLL.DLL.
> Start windows.
> Check your registry for any KERNEL32.EXE entry and delete.
> The worm itself is now gone, but there are still some related files
> on your
> system.
> To delete these best run a resent (free online!) virus scan on your
> system.
>
> Last but not least, change your pass words, KDLL is a password
> logger!.
>
>
> Theo.
> In an utter attempt to get the list worm free again.
>
>
> From: Peter B <dragonservicing at success4business.com>
>
> > hi,
> > just to say that I also have got a suspicious email from J A
> Kolaric,
> > subject re[ sdiy ] divider ic's.
> > but not sent via the list it seems .
> > regards Peter
> >
> > --
> > web page http://home.clara.net/dragonser/index.html
> >
> >
> >
>
__________________________________________________
Do You Yahoo!?
Send FREE video emails in Yahoo! Mail!
http://promo.yahoo.com/videomail/
More information about the Synth-diy
mailing list