[Micronet] "Navidad" or Barcode icon = Virus?

From: David JL Rieger (drieger@olac.berkeley.edu)
Date: Wed Nov 08 2000 - 07:57:31 PST

  • Next message: Shannon Thorn: "Re: [Micronet] "Navidad" or Barcode icon = Virus?"

    Good Day,

    I have a user who opened an attachment on her computer that, he reports
    (this is a home box), launched a button in Spanish saying something to the
    effect "do not push the dos button". They had an eyeball icon on the
    attachment (they're using Eudora). Three things then happened.

    1.) They received a "gray box" message from our computer saying that it
    could not access our applications, because it could not find the
    "winsvrc.exe" file
    2.) An eyeball icon appeared in the bottom righthand corner of the screen
    3.) They saw the Spanish language message.

    They cannot access their applications. They can still access their web
    however. They, however, continue to get the "gray box" message.

    I had the user check their attachment directory to see what files were
    recently received there and I was told there is a "navidad" file as well as
    a file that appears iconographically as a bar-code.

    All my searches with anti-virus intelligence sources has not come up with
    anything but this email originated in Morocco via France. Has any body
    heard of something like this? Or could this be something new or something
    isolated that unintendedly had these consequences?

    Thank you for your input.

    Best Regards,

    David Rieger

    ------------------------------------------------------------------------
    The following was automatically added to this message by the list server:

    For information about Micronet, its meetings and events, and its
    mailing list, including information on subscribing and unsubscribing,
    see the Micronet Web site at <URL:http://wss.berkeley.edu/micronet/>.



    This archive was generated by hypermail 2b29 : Wed Nov 08 2000 - 08:03:21 PST