Re: Scrolling WARNING
- Thanks for posting the name of this virus.
Once you told us the name W32.Klez, I found a solution and
applied it. The tool I used is at:
It seemed to work. There are several missing .exe files on
my system and many more are not operational. I'm testing
and replacing .exe files that fail and uninstalling and
reinstalling applications. So far, none of the bad files
have been system files.
This is painful :-(
- Bill McCarthy wrote:
> The email with subject "Scrolling" contains a virus.If you are using MS-Windows, and especially when using Outlook, you
> My laptop is infected with it and Office Scan didn't help.
> It appears to delete .exe files on my Win2000 system.
> The only fix I know of is to reinstall the operating system.
> Any other ideas?
should get a good virus scanner.
I receive about 30 virus messages each day. My FreeBSD system isn't
This is the first virus message coming from the Vim maillist. I wonder
how it managed to get by the required subscription block. In case it
helps, this was the header:
> Return-Path: <vim-dev-return-19355-Bram=moolenaar.net@...>I have removed the message from the archive at Yahoo to avoid any
> Delivered-To: mool-moolenaar:net-Bram@...
> X-Envelope-To: bram@...
> Received: (qmail 63196 invoked from network); 30 Apr 2002 16:36:20 -0000
> Received: from foobar.math.fu-berlin.de (220.127.116.11)
> by ulwar.pair.com with SMTP; 30 Apr 2002 16:36:20 -0000
> Received: (qmail 25445 invoked by uid 200); 30 Apr 2002 16:35:51 -0000
> Mailing-List: contact vim-dev-help@...; run by ezmlm
> Precedence: bulk
> Delivered-To: mailing list vim-dev@...
> Received: (qmail 25437 invoked from network); 30 Apr 2002 16:35:50 -0000
> From: guckes <guckes@...>
> To: vim-dev@...
> Subject: Scrolling
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> Message-Id: <20020430163357.VBMF2361.out005.verizon.net@Ecehqrf>
> Date: Tue, 30 Apr 2002 11:35:00 -0500
[Autumn changed into Winter ... Winter changed into Spring ... Spring
changed back into Autumn and Autumn gave Winter and Spring a miss and
went straight on into Summer ... Until one day ...]
"Monty Python and the Holy Grail" PYTHON (MONTY) PICTURES LTD
/// Bram Moolenaar -- Bram@... -- http://www.moolenaar.net \\\
/// Creator of Vim -- http://vim.sf.net -- ftp://ftp.vim.org/pub/vim \\\
\\\ Project leader for A-A-P -- http://www.a-a-p.org ///
\\\ Help me helping AIDS orphans in Uganda - http://iccf-holland.org ///
- Am I just paranoid, or is it a strange coincidence that
this virus got posted to the list just after an in-depth
discussion about the rights and wrongs of HTML mails on
the vim-dev list?
After all the poster had to specifically spoof the
headers in order to get the message to the list.
- On Wed, 1 May 2002, Vince Negri wrote:
>Nope, you're just paranoid. (But that doesn't mean they're not out to
> Am I just paranoid, or is it a strange coincidence that
> this virus got posted to the list just after an in-depth
> discussion about the rights and wrongs of HTML mails on
> the vim-dev list?
> After all the poster had to specifically spoof the
> headers in order to get the message to the list.
get you ;) If you read the description of the virus, it automatically
spoofs the headers to make the From: line be someone you have received
email from before. And, in fact, the HTML discussion came up as a reply
to an earlier post of the same virus. So, probably the virus spread to
the list via some vim-dev subscriber's address book, another vim-dev
subscriber contracted it, and eventually it forwarded itself back to the
list again, claiming to be a third subscriber.