[PLUG] A very clever anti-M$ scam

[Mike De La Mater]

4/3/03 10:28:31 AM, Bill Thoen <bthoen at gisnet.com> wrote:

>Rich Shepard wrote:
>> who blithly run the executable will find their system 
compromised in one or
>> more ways.
>
>Yes, it'll probably install XP...

OOOHHH NOOOO, That's worse than the palyoad of the KLEZ...

Which, by the way is nicely dispatched after installing the 
infected dive in a Linux box and deleting it's exe files... 
(I also used the sym_nt_c utility from sarc.com, but knowing 
the damn thing couldn't replicate on bootup was a great 
relief)

Mike De La Mater
mikedela at ipns.com
503-702-6749