Watch out for previous mail from Marvin Chase!!!!
His mail probably contains a virus (Happy99)...
Do not blame him to quickly, he probably did not know it himself (see below)
Kristof
> From McAfee site:
> HAPPY99.EXE is the usual file name of this virus and has been
> distributed via email and newsgroup postings.
> When run displays a message "Happy New Year 1999!!" and
> displays "fireworks" graphics. When HAPPY99 is
> run it copies itself to Windows\System folder under the
> name SKA.EXE. It then extracts from within itself a
> DLL called SKA.DLL into the Windows\System folder if one
> does not already exist.
>
> The virus then checks for the existance of WSOCK32.SKA
> in the Windows\System folder, if it does not exist
> and a the file WSOCK32.DLL does exist, it copies the
> WSOCK32.DLL to WSOCK32.SKA.
>
> The virus then creates the registry entry -
>
>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Ska.exe
="Ska.exe"
>
> which will execute SKA.EXE then next time the system is
> restarted. When this happens the virus patches
> WSOCK32.DLL and adds hooks to the exported functions
> EnumProtocolsW and WSAAsyncGetProtocolByName.
>
> The patched code calls two exported functions in SKA.DLL
> called mail and news, these functions allow the
> virus to attach itself to SMTP e-mail and also to any
> postings to newsgroups. This "feature" of the virus was
> not heavily tested although initial tests were not
> conclusive in proving the method successful.
> Detection is available for this virus from the below
> sources. If this virus has been found on your system, it is
> recommended that the WSOCK32.DLL file be replaced with
> the backup created during infection called
> WSOCK32.SKA, or get from a known clean system. Also,
> delete the files detected as infected.
****************************************************************************
*********
ir. Kristof Decloedt
University of Ghent - Faculty of Applied Science - dept. Information
Technology (INTEC) - INTEC Broadband Communication Networks (IBCN) group
Sint-Pietersnieuwstraat, 41
B-9000, Gent, Belgium
tel.: +32-9-264 89 31
fax : +32-9-264 35 93
e-mail : [EMAIL PROTECTED]
****************************************************************************
*********
=====================================================================
To subscribe/unsubscribe, send mail to [EMAIL PROTECTED]
Java 3D Home Page: http://java.sun.com/products/java-media/3D/
