SV: [TOEC] VIRUS-rapport
Mikael Westerlund
sm3jla@algonet.se
Tue, 30 Apr 2002 11:07:16 +0200
Lite tillägg angående KLEZ viruset
klez.a-g
"Payload
On the 13th of even months, the worm executes a payload routine, which fills all files on all available victim s'computer disks with random content. These files can't be recovered and must be restored from a backup copy. "
Klez.e
"Payload
On the 6th of odd months, the worm executes a payload routine that fills all available files on a victim's computer in local and network disks with random content. These files can't be recovered and must be restored from a backup copy. "
Klez.h
"The Klez.h variant of the Klez worm family is very similar to Klez.e. The differences are:
This variant has no payload and doesn't destroy files. "
----- Original Message -----
From: Jan-Eric Rehn - SM3CER <jan-eric.rehn@telia.com>
To: TOEC <toec@contesting.com>
Sent: Tuesday, April 30, 2002 1:36 AM
Subject: [TOEC] VIRUS-rapport
> Att viruset är farligt vet Arne, SM5CYQ, som påstod sig
> fått viruset skickat med mig som avsändare. Han testade att
> köra det i en "testdator" och det började radera hårddisken
> omedelbart.
>
> Bara så ni får en uppfattning om hur spritt detta virus
> är idag, så kommer här den "skörd" jag mottagit i min mail
> den 29 april.
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 08:31:42 +0200 (CEST)
> From: oraqle@slq.qld.gov.au
> To: sm3cer@contesting.com
> Subject: A very excite game
>
> Hello, This is a special excite game
> This game is my first work.
> You're the first player.
> I wish you would like it.
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 10:44:57 +0200 (CEST)
> From: postmaster <postmaster@svessa.se>
> To: sm3cer@contesting.com
> Subject: Returned mail--"so cool a flash,enjoy it"
>
> The following mail can't be sent to kc4elo-sc@home.com:
>
> From: sm3cer@contesting.com
> To: kc4elo-sc@home.com
> Subject: so cool a flash,enjoy it
> The file is the original mail
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 11:33:23 +0200 (CEST)
> From: sm3cvm <sm3cvm@swipnet.se>
> To: sm3cer@sk3bg.se
> Subject: So cool a flash,enjoy it
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 11:58:51 +0200 (CEST)
> From: kejsarper <kejsarper@hotmail.com>
> To: sm3cer@contesting.com
> Subject: Congratulations
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 16:55:39 +0200
> From: weidling <weidling@beta.telenordia.se>
> To: sm3cer@contesting.com
> Subject: A IE 6.0 patch
>
> This is a IE 6.0 patch
> I wish you would enjoy it.
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 17:09:34 +0200
> From: postmaster <postmaster@svessa.se>
> To: sm3cer@svessa.se
> Subject: Returned mail--"Stryktipset"
>
> The following mail can't be sent to icq_admin@icq.com:
>
> From: sm3cer@svessa.se
> To: icq_admin@icq.com
> Subject: Stryktipset
> The file is the original mail
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 19:36:22 +0200 (CEST)
> From: ltamlbr <ltamlbr@orae.e>
> To: sm3cer@sk3bg.se
> Subject: ACCESSKEY
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 15:32:39 -0400
> From: noll <noll@algonet.se>
> To: sm3cer@contesting.com
> Subject: Japanese lass' sexy pictures
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 21:33:51 +0200
> From: uLymann7 <uLymann7@excite.com>
> To: sm3cer@contesting.com
> Subject: Av din webbl
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 22:44:48 +0200 (CEST)
> From: tomas <tomas@ahlund.com>
> To: sm3cer@sk3bg.se
> Subject: Upp igen
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 22:57:50 +0200
> From: rgr <rgr@swipnet.se>
> To: sm3cer@contesting.com
> Subject: VHF testresultat
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Mon, 29 Apr 2002 23:11:46 +0200
> From: sm0chh <sm0chh@svessa.se>
> To: sm3cer@svessa.se
> Subject: Fw:honey
>
> - - - - - - - - - - - - - - - - - - - -
>
> ...och under tiden jag författat detta mail har det
> droppat in två till, daterade den 30 april:
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Tue, 30 Apr 2002 00:45:30 +0200
> From: rgr <rgr@swipnet.se>
> To: sm3cer@contesting.com
> Subject: Hello,your password
>
> - - - - - - - - - - - - - - - - - - - -
>
> Date: Tue, 30 Apr 2002 08:22:22 +0900
> From: conferences <conferences@sheffield.ac.uk>
> To: sm3cer@contesting.com
> Subject: Meeting notice
>
> - - - - - - - - - - - - - - - - - - - -
>
> SÅ SNÄLLA - KOLLA ERA DATORER!!!
>
> Det här börjar bli aningen jobbigt nu...
>
> 73 de Janne
>
> ----------------------------------------------------
> Jan-Eric Rehn - SM3CER - Contest call: 7S3A
> E-mail: sm3cer@contesting.com - ICQ: 11074897
> SM3CER Contest Service: http://www.sk3bg.se/contest/
> SK3BG Web Site: http://www.sk3bg.se/
> Also QRV in MS or MM from: SI9AM - SK3IK - SL3ZV
> K6U at WRTC-96 / Referee at WRTC-2000 and WRTC-2002
> ----------------------------------------------------
>
>
> _______________________________________________
> TOEC mailing list
> TOEC@contesting.com
> http://lists.contesting.com/mailman/listinfo/toec
>