Loading ...
Sorry, an error occurred while loading the content.

[NTO] Got a really bad virus!

Expand Messages
  • Marco Bernardini
    *This message was transferred with a trial version of CommuniGate(tm) Pro* Hi all! What about a .TXT.PIF virus? a couple of days ago I got one, and it seems a
    Message 1 of 5 , Mar 31, 2001
    • 0 Attachment
      *This message was transferred with a trial version of CommuniGate(tm) Pro*

      Hi all!

      What about a .TXT.PIF virus?
      a couple of days ago I got one, and it seems a stinky one!
      Here is some readable text I find opening it with NT:

      NII.nai.avp.AVP.F-Sef-semaplpandsophndmiafeeyennlywatbavyman[;„H··ƒÃâóè"··wildlist.oil.esafe.cperfectsupcomplex.isHiServ.comhiserv.commetro.ch>
      beyond.commcafee.compandasoftwearthlink.inexar.comcomkom.co.meditrade.mabex.com>cellco.comsymantec.csuccessfulinforamp.nnewell.comsingnet.cobmcd.com.abca.com.nztrendmicrosophos.commaple.com.netsales.nf-secure.cF-Secure.c

      README.TXT.pif·I_wanna_see_YOU.TXT.pif·MATRiX_Screen_Saver.SCR·LOVE_LETTER_FOR_YOU.TXT.pif·NEW_playboy_Screen_saver.SCR·BILL_GATES_PIECE.JPG.pif·TIAZINHA.JPG.pif·FEITICEIRA_NUA.JPG.pif·Geocities_Free_sites.TXT.pif·NEW_NAPSTER_site.TXT.pif·METALLICA_SONG.MP3.pif·ANTI_CIH.EXE·INTERNET_SECURITY_FORUM.DOC.pif·ALANIS_Screen_Saver.SCR·READER_DIGEST_LETTER.TXT.pif·WIN_$100_NOW.DOC.pif·IS_LINUX_GOOD_ENOUGH!.TXT.pif·QI_TEST.EXE·AVP_Updates.EXE·SEICHO-NO-IE.EXE·YOU_are_FAT!.TXT.pif·FREE_xxx_sites.TXT.pif·I_am_sorry.DOC.pif·Me_nude.AVI.pif·Sorry_about_yesterday.DOC.pif·Protect_your_credit.HTML.pif·JIMI_HMNDRIX.MP3.pif·HANSON.SCR·FUCKING_WITH_DOGS.SCR·MATRiX_2_is_OUT.SCR·zipped_files.EXE·BLINK_182.MP3.pif·················Software
      provide by [MATRiX] VX team:
      Ultras, Mort, Nbk, LOrd DArk, Del_Armg0, Anaktos
      Greetz:·
      All VX guy on #virus channel and Vecna
      Visit us: www.coderz.net/matrix

      It seems it looks directly for antivirus!
      And, being a .PIF, it's impossible to rename it from windows, as .EXE and .SCR.

      Someone need a copy?


      Bye!

      Marco Bernardini
    • Lotta
      Hi Marco And what is it called? I_wanna_see_YOU.TXT.pif? ... Lotta
      Message 2 of 5 , Apr 1, 2001
      • 0 Attachment
        Hi Marco

        And what is it called? I_wanna_see_YOU.TXT.pif?

        >What about a .TXT.PIF virus?


        Lotta
      • Marco Bernardini
        *This message was transferred with a trial version of CommuniGate(tm) Pro* ... IS_LINUX_GOOD_ENOUGH!.TXT.pif Bye! Marco Bernardini
        Message 3 of 5 , Apr 1, 2001
        • 0 Attachment
          *This message was transferred with a trial version of CommuniGate(tm) Pro*

          Alle 10.06 Sunday 01/04/2001 +0200, Lotta ha mandato a Marco questo messaggio:


          >And what is it called? I_wanna_see_YOU.TXT.pif?

          IS_LINUX_GOOD_ENOUGH!.TXT.pif


          Bye!

          Marco Bernardini
        • Lotta
          Hello, And what do we all think about guys who infects girls with a virus? BOO BOO MARCO! Thank God I had protection :)))) Can t find it in the encyclopedias.
          Message 4 of 5 , Apr 1, 2001
          • 0 Attachment
            Hello,

            And what do we all think about guys who infects girls with a virus? BOO BOO
            MARCO! Thank God I had protection :))))

            Can't find it in the encyclopedias. Anyone familiar with it? I'm OK, just
            curious.

            Lotta

            ..................................................................................
            InoculateIT Personal Edition Version 5.2.9.0
            Scanning file(s)...
            c:\windows\skrivbord\attached\is_linux_good_enough!.txt.virus!!!!.vir -
            Win95.Mtx worm. Deleted.

            Finished scanning: 16:56:33, 2001-04-01
            Number of files scanned: 1.
            Number of infections: 1
            Number of infected files deleted: 1
          • Jody
            Hi Lotta, ... It looked like to me that it could rename itself. It had a whole list of named in what Marco sent.
            Message 5 of 5 , Apr 1, 2001
            • 0 Attachment
              Hi Lotta,


              >InoculateIT Personal Edition Version 5.2.9.0
              >Scanning file(s)...
              >c:\windows\skrivbord\attached\is_linux_good_enough!.txt.virus!!!!.vir -
              >Win95.Mtx worm. Deleted.

              It looked like to me that it could rename itself. It had a whole
              list of named in what Marco sent.
            Your message has been successfully submitted and would be delivered to recipients shortly.