That's what it was; a common virus. (Klez, in this case) A very rare event here, which is why I was thinking of Mozilla-specific hacks instead of the more obvious suspect.
Sorry for posting too quickly. Thanks for your response.
Jerome
HJ wrote:
Do you have a GOOD virus scanner? If not, get one.
/HJ
[EMAIL PROTECTED] wrote:
Hi,
I'm new to this group. Came looking for a description of a problem I've just found on my wife's computer. Finding none, thought I'd post what I'm seeing.
Win98SE, Moz 1.7:
First indication of a problem was when ZoneAlarm kicked out a warning that mozillaygt.exe was trying to access the internet. Apparently, my wife had seen this before, and allowed it access, but not permanently.
In the program file/moz directory, I found a file named mozilla.ygt - attributes: hidden, system. File date of today, file size almost the same as mozilla.exe.
When you launch mozilla.exe, a new file is created in that folder, named mozilla.ygt.exe. After closing, that file dissapears. So mozilla.exe seems to be calling mozilla.ygt, which is creating a temporary executable that poses as Mozilla.
I've Googled for various combinations of mozilla, ygt, worm, etc... and don't find anything. Has anyone out there seen something like this?
Sorry about the munged email address; don't want the spam. Please reply to group.
TIA for any information.
Jerome Vogel
_______________________________________________ Mozilla-security mailing list [email protected] http://mail.mozilla.org/listinfo/mozilla-security
