[vorbis-dev] a trojan is on your computer!

[programmer_ted]

Yup, the virus in the attachment is W32.Sober.C at mm (according to Norton
Antivirus).

>From the Symantec site:

W32.Sober.C at mm is a mass-mailing worm that uses its own SMTP engine to
spread. The subject of the email varies and is written in either English or
German. The email's     attachment name also varies, but it has a .bat,
.com, .cmd, .exe, .pif, or .scr file extension.

The first time W32.Sober.C at mm is activated, it displays a fake error
message, with the subject "Microsoft," and the text "<file name> has caused
an unknown error. Stop: 00000010x18."

This threat is written in the Microsoft Visual Basic programming language
and is compressed with UPX.

The URL that I got that from is
http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.c@mm.html
in case you did launch this attachment (so you can remove the virus).

Ted
----- Original Message ----- 
From: <monty at xiph.org>
To: <jack at xiph.org>
Sent: Saturday, January 17, 2004 1:48 PM
Subject: [vorbis-dev] a trojan is on your computer!

<p>> hi, I am from Norway and you'll don't believe me,
> but a trojan horse in on your pc.
> I've scanned the network-ports on the internet. (I know, that's illegal)
> And I have found your pc. Your pc is open on the internet for everybody!
> Because the smss.exe trojan is running on your system.
> Check this, open the task manager and try to stop that!
> You'll see, you can't stop this trojan.
> When you use win98/me you can't see the trojan!!
>
> On my system was this trojan, too!
> And I've found a tool to kill that bad thing.
> I hope that I've helped you!
>
> greets

--- >8 ----
List archives:  http://www.xiph.org/archives/
Ogg project homepage: http://www.xiph.org/ogg/
To unsubscribe from this list, send a message to 'vorbis-dev-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.