Do a file search on your hard drive for *.vbs.

This will be your most probable suspect.  You can then go to
www.symantec.com and check the name of the file against others.

Try to locate that e-mail and send the attachment to me [log in to unmask]
and I will have a look.  If you don't see it in your latest mail, check your
Deleted items folder for the e-mail and forward it to me.
---i've received this one at least 6 times in the past 2 months from:

[log in to unmask]
Snow White and the Seven dwarves


The attachment may have one of several different names, including, but not
limited to:


anpo porn(.scr
atchim.exe
branca de neve.scr
dunga.scr
dwarf4you.exe
enano porno.exe
joke.exe
midgets.scr
sexy virgin.scr


--gary r. tennesen
[log in to unmask]

-----Original Message-----
From: PCBUILD - Personal Computer Hardware discussion List
[mailto:[log in to unmask]]On Behalf Of Geraldine Dunne
Sent: Thursday, May 17, 2001 5:11 PM
To: [log in to unmask]
Subject: [PCBUILD] Possible Virus Infection


Good morning font of knowledge,

I rather suspect that I have received an email that contained a virus.
Suddenly two people in my address book (Outlook Express) received an email
from another person, also in my book, that were really weird. One of those
emails contained an exe file that when the recipient tried to open warned
them that they shouldn't.  Anyway, we have all done scans to no avail.  Here
are the results of my Innoculate IT scan:-

Started scanning: 8:00:11, 18/05/01
 Major dat file  v200
 Minor dat file  v532
 Macro dat file Jan 23 2001 (VMD Ver 1.4)

Scanning memory...

Scanning boot sectors...
C:\ Master Boot Record matches template, is OK: standard Win95 OSR2.
C:\ Partition Boot Record matches template, is OK: standard MSWIN 4.1 FAT32.

Scanning file(s)...
C:\WINDOWS\MSIMGSIZ.DAT - unable to open file - not scanned.
C:\WINDOWS\WIN386.SWP - unable to open file - not scanned.
C:\WINDOWS\Cookies\INDEX.DAT - unable to open file - not scanned.
C:\WINDOWS\Temporary Internet Files\INDEX.DAT - unable to open file - not
scanned.
C:\WINDOWS\LT Win Modem.log - unable to open file - not scanned.
C:\WINDOWS\History\INDEX.DAT - unable to open file - not scanned.
C:\WINDOWS\History\MSHist012001051820010519\index.dat - unable to open
file - not scanned.
C:\WINDOWS\Internet Logs\IAMDB.RDB - unable to open file - not scanned.
C:\WINDOWS\Internet Logs\PAVILION.ldb - unable to open file - not scanned.

Finished scanning: 8:03:31, 18/05/01
Number of files scanned: 12557.
Number of files that could not be scanned: 9
No file viruses detected.

Normally I don't get that many files that can't be scanned.  I run Windows
98, On a Pentium II with 64MB Ram.  Now miraculously, my printer has
suddenly decided it is not installed and when I go to settings it brings up
the add a printer icon.

Does anyone know of this virus, what it may be called and what I can do
about it?

Your help would be appreciated.

Regards,
Gerry Dunne

            Do you want to signoff PCBUILD or just change to
                    Digest mode - visit our web site:
                   http://freepctech.com/pcbuild.shtml

            Do you want to signoff PCBUILD or just change to
                    Digest mode - visit our web site:
                   http://freepctech.com/pcbuild.shtml