I got it as well this a.m. It used the "re: re: a2gs on harddisk30 thread. I
use Pegasus and don't open attachments or fomatted msgs which
occasionally also turn up on the list. Curious, I attempted to "View" the
audio docs/doc.pif file and stupidly pressed "Open" instead. It ran and I got
several out of memory windows and an illegal operation/close program one.
My Norton came up blank since, of course, it's a new virus. Checked my
classiccmp folder and saw Allisons heads-up which gave the identity.
The Sophus site descibed it and how to remove it. Searched my HD and
sure enough kernel32.exe and kdll.dll were there. They have to be removed
by dos since they're locked in Windoze. It also usually puts an entry in the
registry according to Sophus, but wasn't in mine since I hadn't opened it by
the usual route or something. What a pain in the butt. Sophus says it's the
top worm at present.
lawrence
It was sent
to me 'personally', ie not as a classiccmp post. Since it
was an unsolicited attachment from an unacknowledged source, it filed it
in /dev/nul.
I got it as well but followed the same logic you did. I also
received the virus once over the weekend as well, but it wasn't from
a list subscriber. I don't use Outlook on my Mac's and don't have
autopreview turned on when I'm using it under NT.
Jeff
--
Home of the TRS-80 Model 2000 FAQ File
http://www.cchaven.com
http://www.geocities.com/siliconvalley/lakes/6757
Reply to:
lgwalker(a)mts.net