Return-Path: Received: from pop3.olsusa.com ([63.150.212.2] verified) by logan.com (CommuniGate Pro SMTP 3.4.5) with ESMTP id 782241 for rob@logan.com; Sat, 19 May 2001 14:02:16 -0400 Received: from anna.ana.com ([207.44.232.227]) by pop3.olsusa.com (Post.Office MTA v3.5.3 release 223 ID# 0-71175U5500L550S0V35) with ESMTP id com for ; Sat, 19 May 2001 13:09:40 -0400 Received: from gjpc (sdsl-216-200-177-57.dsl.sjc.megapath.net [216.200.177.57]) by anna.ana.com (8.9.3/8.9.3) with SMTP id KAA01624 for ; Sat, 19 May 2001 10:16:46 -0700 (PDT) Message-ID: <006101c0e087$ac578ec0$6d01a8c0@gjpc> From: "Gerard J. Cerchio" To: Subject: possible worm Date: Sat, 19 May 2001 10:18:07 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Mailing-List: lancair.list@olsusa.com Reply-To: lancair.list@olsusa.com <<<<<<<<<<<<<<<<--->>>>>>>>>>>>>>>> << Lancair Builders' Mail List >> <<<<<<<<<<<<<<<<--->>>>>>>>>>>>>>>> >> Hi All, I recieved a direct emali from Stu Seffern" sseffern@home. com it at first appearence looks like a .txt file but it actually a program information file (pif).This can run a program directly from the network. It is very nasty. I am anlysing it and I see it hitting the registry and other very bad things. I urge extreme caution if anyone else gets this attatchment "readme.txt.pif" it was attached to a old posting I have placed on the lancair list. any one else get this thing?....Gerard Cerchio >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> LML website: http://www.olsusa.com/Users/Mkaye/maillist.html LML Builders' Bookstore: http://www.buildersbooks.com/lancair Please send your photos and drawings to marvkaye@olsusa.com. >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>