This virus was reply to each email sent.

I, that day, have posted a reply here to someone. It reached some poor
php-general list subscriber and it's outlook (or whatever) has replied to me
personally with that .EXE file attached. I didn't open it of course since I
receive such a staff at least twice a day (no kidding, I am subscribed to
dozens of lists)

I think, removing the guy of the list would help us to avoid meeting the
virus on this list again.


Sincerely, 

 Maxim Maletsky
 Founder, Chief Developer
 PHPBeginner.com (Where PHP Begins)
 [EMAIL PROTECTED]
 www.phpbeginner.com



-----Original Message-----
From: Padraic Tynan [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 25, 2001 6:29 AM
To: [EMAIL PROTECTED]
Subject: [PHP] Very important.


Hi.

Yesterday an email-virus entitled Emanuel was sent out over this list, and I
am not sure by who. It came in the form of Emanuel.exe, and had an icon
resembling that of a standalone flash projector file (pink diamond with a
white multi-pointed asterisk-type thing in the middle).

This virus appears to be a backorifice or netbus style virus, and adds
something to a system file that makes it so that *every* time you try to
launch a program, it launches "Wintask.exe", which is *not* an official
task, despite the name. It puts a green ICQ flower in your taskbar, and if
you click it, a button pops up that says "Nunca <bla bla> esta button". The
<bla bla> is because I forget the word for "push" in spanish, and I'm not
about to open this program again -- It translates to "NEVER PUSH THE BUTTON"
-- and trust me, *don't*, this, i have found, is what activates the virus.

I may have lost several weeks of work to this virus, and I advise you all to
watch out, as it was likely sent inadvertantly.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to