From: aergo (aergo@earthlink.net)
Date: Tue Oct 16 2001 - 16:47:33 PDT
Just received this question in email . . .
Please, can someone offer advice for this problem ???
Subject: Virus help please
There is a guy going around the yahoo clubs who is
joining clubs, putting
his link into the links section, and then deleting
himself. The no. of clubs
he has done this is enormous.
Apart from this being considered spamming by the rest
of us, his sites are
infecting our computers with a virus, or, to be
technically correct, a
Trojan Horse.
Some of us are now in contact with this person, who
is claiming that his
site is not infected. I know that this is not the
case since my own Norton
virus checker flew into action and wouldn't let me
print up his entry page
when I tried to.
The name of the 'virus' that came up on my screen at
that time was this:
JS.Exception.Exploit and the info. on it can be read
at the semantic site
here:
http://www.symantec.com/avcenter/venc/data/js.exception.exploit.html
Now I have a few questions over this. Is it possible
that this person has
put the code onto his site without knowing that it is
a Trojan Horse?
Does anyone know how we would recognise the code on
his site.... because we
would like to know if he has now changed his site and
deleted the
virus-code.
He is claiming that there is no such code on his
site.... but several of us
have had the same thing happen when we tried to print
up a page from his
computer so either he is lying, or he is unaware of
what is on his site. We
would like to have some means of finding out... can
anyone help please?
I don't like to post the url's of the sites (there
are two) concerned,
because I did get the virus from it.
------------------------------------------------------------------------
The following was automatically added to this message by the list server:
For information about MAGNet, its meetings and events, and its
mailing list, including information on subscribing and unsubscribing,
see the MAGNet Web site at <http://mac.berkeley.edu/help/magnet/>.
This archive was generated by hypermail 2b29 : Tue Oct 16 2001 - 16:50:08 PDT