Marc van den Dikkenberg schrieb in Nachricht
<36ace6b1.6367415@news.povray.org>...
>
>After a short websarch, I found some info on this SKA-virus, including info
>on how to remove it..
>It turns out that I was right about the wsock32.dll thingey: it does make a
>backup! (luckily) So... If you've run the HAPPY99.EXE (the fireworks)
>THEN READ THIS MESSAGE!!!
>
>http://www.geocities.com/SiliconValley/Heights/3652/SKA.HTM


Thank you Marc, that was exactly what I had figured out too (just a few
minutes ago :-). We can really be glad it makes a backup copy of wsock32.dll
(although it would propably be easy to re-extract it from the original
win95/98 cab files - could be a bit hard to search for though).

At least this unhappy chapter of my newsgroup readings is over for now.

BTW I think you are right. These people are trying to collect as many VALID
(unscrambled) e-mail adresses. Here in Germany there was a case which got a
lot of publicity: some teenagers wrote a Trojan called something like
"T-Online Utilities". They collected all the (not very well hidden) password
files of Germany's largest online service, T-Online, from the users of these
utilities (they really worked and were in fact very handy, I'm told) and had
them sent to them. Fortunately, they didn't use the passwords, but just went
to the press with them. The programmer of the utilities has a good job in a
software company now <g>. This case caused a lot of trouble to T-Online,
because of users being angry about the very simple password encryption
T-Online used.

--
Rudy Velthuis

Post a reply to this message