1. NOW I now what the hell it is !
------=_NextPart_000_005D_01BF65A3.62863360
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
This virus installed itself ! It infected my files , so its a file =
infector . When I play quake , it gives me errors . While i work on the =
net , it gives me "<something> has performed am ilegal operation and =
will be terminated" . When this happens , it tels me the thing that is =
causing this is files such as kernel32.dll , winsock.dll ect. Then I got =
another email that had another virus on it . And this one is not the =
same as the other . The guy who is sending these stuff must be on some =
kind of frenzy ! And one other strange thing is that the file size of =
both viruses are the same . Something is still bothering me . What kind =
of sick person would do a thing like that . I dont know what plesure he =
gets out of destroing other innocent users PC `s . How do I get the crap =
of my system . Its gonna be imposeble because it wont be able to get the =
crap out of my files ....... What can I do !
My mom`s gonna kill me and if my PC doesn`t work anymore , I`m not gonna =
get a new one ,because I got this one this year . Problems , problems !
What can I do !
Your dear friend and fellow coder ( with a dieing PC )
Ferdinand Greyling
------=_NextPart_000_005D_01BF65A3.62863360
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2614.3500" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>This virus installed itself ! It infected my =
files , so=20
its a file infector . When I play quake , it gives me errors . While i =
work on=20
the net , it gives me "<something> has performed am ilegal =
operation=20
and will be terminated" . When this happens , it tels me the thing that =
is=20
causing this is files such as kernel32.dll , winsock.dll ect. Then I got =
another=20
email that had another virus on it . And this one is not the same as the =
other=20
. The guy who is sending these stuff must be on some kind of frenzy =
! And=20
one other strange thing is that the file size of both viruses are the =
same .=20
Something is still bothering me . What kind of sick person would do a =
thing like=20
that . I dont know what plesure he gets out of destroing other innocent =
users PC=20
`s . How do I get the crap of my system . Its gonna be imposeble because =
it wont=20
be able to get the crap out of my files ....... What can I do=20
!</FONT></DIV>
<DIV> </DIV>
<DIV>My mom`s gonna kill me and if my PC doesn`t work anymore , I`m not =
gonna=20
get a new one ,because I got this one this year . Problems , problems =
!</DIV>
<DIV>What can I do !</DIV>
<DIV> </DIV>
<DIV>Your dear friend and fellow coder ( with a dieing PC )</DIV>
------=_NextPart_000_005D_01BF65A3.62863360--
2. NOW I now what the hell it is !
- Posted by Fernando Ortiz <fernando at rxp.com>
Dec 25, 2000
-
Last edited Dec 26, 2000
------=_NextPart_000_0012_01C06EAF.65926900
charset="iso-8859-1"
Hey, Ferdinand.
Are you somewhere in Africa?
Dr.X
drx at cyberenhanced.com <mailto:drx at cyberenhanced.com>
------=_NextPart_000_0012_01C06EAF.65926900
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta name=3D"Microsoft Theme 2.00" content=3D"test.htm 011">
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<meta name=3DProgId content=3DWord.Document>
<meta name=3DGenerator content=3D"Microsoft Word 9">
<meta name=3DOriginator content=3D"Microsoft Word 9">
<link rel=3DFile-List href=3D"cid:filelist.xml at 01C06EAF.65693620">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
</w:WordDocument>
</xml><![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
p.MsoAutoSig, li.MsoAutoSig, div.MsoAutoSig
{margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
span.EmailStyle15
{mso-style-type:personal-compose;
color:black;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=3DEN-US link=3Dblue vlink=3Dpurple =
style=3D'tab-interval:.5in'>
<div class=3DSection1>
<p class=3DMsoNormal><span class=3DEmailStyle15><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span style=3D'font-size:12.0pt'>Hey, =
Ferdinand.<o:p></o:p></span></font></span></p>
<p class=3DMsoNormal><span class=3DEmailStyle15><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span style=3D'font-size:12.0pt'><![if =
<p class=3DMsoNormal><span class=3DEmailStyle15><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span style=3D'font-size:12.0pt'>Are you =
somewhere in Africa?<o:p></o:p></span></font></span></p>
<p class=3DMsoNormal><span class=3DEmailStyle15><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span style=3D'font-size:12.0pt'><![if =
<p class=3DMsoNormal><span class=3DEmailStyle15><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span =
<p class=3DMsoNormal><span class=3DEmailStyle15><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span style=3D'font-size:12.0pt'><a
></span></font></span></p>
<p class=3DMsoNormal><span class=3DEmailStyle15><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span style=3D'font-size:12.0pt'><![if =
<p class=3DMsoNormal><span class=3DEmailStyle15><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span style=3D'font-size:12.0pt'><![if =
</div>
</html>
------=_NextPart_000_0012_01C06EAF.65926900--
3. Re: NOW I now what the hell it is !
On 23 Jan 2000, at 13:11, ? wrote:
> know what plesure he gets out of destroing other innocent users PC `s . How do
> I get the crap of my system . Its gonna be imposeble because it wont be able
> to get the crap out of my files ....... What can I do !
There are free antivirus scanners online, why can't you run one? And stop
running these programs people send you.
> My mom`s gonna kill me and if my PC doesn`t work anymore , I`m not gonna get a
> new one ,because I got this one this year . Problems , problems ! What can I
> do !
Umm,, most people don't toss out hardware just because the software has
a bug.
Kat
4. Re: NOW I now what the hell it is !
- Posted by Bernie <xotron at LOCALNET.COM>
Dec 25, 2000
-
Last edited Dec 26, 2000
On Sun, 23 Jan 2000 13:11:39 +0200, =?iso-8859-1?B?Pws=?=
<mwfch at MWEB.CO.ZA> wrote:
>This virus installed itself ! It infected my files , so its a file
infector . When I play quake , it gives me errors . While i work on the
>Your dear friend and fellow coder ( with a dieing PC )
>Ferdinand Greyling
>
Here is a site where you can get information about viruses
There is a personal virus program at bottom of page.
http://ca.com/virusinfo/
5. Re: NOW I now what the hell it is !
------=_NextPart_000_0006_01C06E9F.91BCD160
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by
smtp-server.tampabay.rr.com id SAA18470
It=92s the same virus. It just has a different name. You should get over =
to
your favorite virus scanner=92s website and see if they have updated thei=
r dat
files yet. It is likely to be a virus that is just easy to rename without
loosing it=92s functionality. In that case the dat files may already exis=
t
identifying it with a different name. I received it from a mail server
somewhere in Africa 3 times and all 3 had different names but the files a=
re
identical.
Dr.x
drx at cyberenhanced.com <mailto:drx at cyberenhanced.com>
-----Original Message-----
From: Euphoria Programming for MS-DOS
[mailto:EUPHORIA at LISTSERV.MUOHIO.EDU]On Behalf Of ?
Sent: Sunday, January 23, 2000 6:12 AM
To: EUPHORIA at LISTSERV.MUOHIO.EDU
Subject: NOW I now what the hell it is !
This virus installed itself ! It infected my files , so its a file infect=
or
. When I play quake , it gives me errors . While i work on the net , it
gives me "<something> has performed am ilegal operation and will be
terminated" . When this happens , it tels me the thing that is causing th=
is
is files such as kernel32.dll , winsock.dll ect. Then I got another email
that had another virus on it . And this one is not the same as the other .
The guy who is sending these stuff must be on some kind of frenzy ! And o=
ne
other strange thing is that the file size of both viruses are the same .
Something is still bothering me . What kind of sick person would do a thi=
ng
like that . I dont know what plesure he gets out of destroing other innoc=
ent
users PC `s . How do I get the crap of my system . Its gonna be imposeble
because it wont be able to get the crap out of my files ....... What can =
I
do !
My mom`s gonna kill me and if my PC doesn`t work anymore , I`m not gonna =
get
a new one ,because I got this one this year . Problems , problems !
What can I do !
Your dear friend and fellow coder ( with a dieing PC )
Ferdinand Greyling
------=_NextPart_000_0006_01C06E9F.91BCD160
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta name=3D"Microsoft Theme 2.00" content=3D"test.htm 011">
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<meta name=3DProgId content=3DWord.Document>
<meta name=3DGenerator content=3D"Microsoft Word 9">
<meta name=3DOriginator content=3D"Microsoft Word 9">
<link rel=3DFile-List href=3D"cid:filelist.xml at 01C06E9F.91708620">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
</w:WordDocument>
</xml><![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:16792199 0 0 0 65791 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
p.MsoAutoSig, li.MsoAutoSig, div.MsoAutoSig
{margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
span.EmailStyle15
{mso-style-type:personal-compose;
color:black;}
span.EmailStyle18
{mso-style-type:personal;
mso-ansi-font-size:10.0pt;
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=3DEN-US link=3Dblue vlink=3Dpurple =
style=3D'tab-interval:.5in'>
<div class=3DSection1>
<p class=3DMsoNormal><span class=3DEmailStyle18><font size=3D2 =
color=3Dnavy face=3DArial><span
’s the
same virus. It just has a different name. You should get over to your =
favorite
virus scanner’s website and see if they have updated their dat =
files yet. It is
likely to be a virus that is just easy to rename without loosing =
it’s
functionality. In that case the dat files may already exist identifying =
it with
a different name. I received it from a mail server somewhere in Africa 3 =
times
and all 3 had different names but the files are =
identical.<o:p></o:p></span></font></span></p>
<p class=3DMsoNormal><span class=3DEmailStyle18><font size=3D2 =
color=3Dnavy face=3DArial><span
bsp;<o:p></o:p></span></font></span></p>
<p class=3DMsoNormal><span class=3DEmailStyle18><font size=3D2 =
color=3Dnavy face=3DArial><span
.x<o:p></o:p></span></font></span></p>
<p class=3DMsoNormal><span class=3DEmailStyle18><font size=3D2 =
color=3Dnavy face=3DArial><span
></span></font></span></p>
<p class=3DMsoNormal><span class=3DEmailStyle18><font size=3D2 =
color=3Dnavy face=3DArial><span
bsp;<o:p></o:p></span></font></span></p>
<p class=3DMsoNormal><span class=3DEmailStyle18><font size=3D2 =
color=3Dnavy face=3DArial><span
bsp;<o:p></o:p></span></font></span></p>
<p class=3DMsoNormal><span class=3DEmailStyle18><font size=3D2 =
color=3Dnavy face=3DArial><span
bsp;<o:p></o:p></span></font></span></p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 =
color=3Dblack
face=3DTahoma><span =
Message-----<br>
<b><span style=3D'font-weight:bold'>From:</span></b> Euphoria =
Programming for
MS-DOS [mailto:EUPHORIA at LISTSERV.MUOHIO.EDU]<b><span =
style=3D'font-weight:bold'>On
Behalf Of </span></b>?<br>
<br>
<b><span style=3D'font-weight:bold'>Sent:</span></b> Sunday, January 23, =
2000
6:12 AM<br>
<b><span style=3D'font-weight:bold'>To:</span></b> =
EUPHORIA at LISTSERV.MUOHIO.EDU<br>
<b><span style=3D'font-weight:bold'>Subject:</span></b> NOW I now what =
the hell
it is !</span></font><font color=3Dblack><span =
style=3D'color:black;mso-color-alt:
windowtext'><o:p></o:p></span></font></p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span =
color=3Dblack><span =
/p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
color=3Dblack
face=3DArial><span =
virus installed itself ! It infected my files , so its a file infector . =
When I
play quake , it gives me errors . While i work on the net , it gives me
"<something> has performed am ilegal operation and will =
be
terminated" . When this happens , it tels me the thing that is =
causing
this is files such as kernel32.dll , winsock.dll ect. Then I got another =
email
that had another virus on it . And this one is not the same as the other
. The guy who is sending these stuff must be on some kind of frenzy =
! And
one other strange thing is that the file size of both viruses are the =
same .
Something is still bothering me . What kind of sick person would do a =
thing
like that . I dont know what plesure he gets out of destroing other =
innocent
users PC `s . How do I get the crap of my system . Its gonna be =
imposeble
because it wont be able to get the crap out of my files ....... =
What can I
do !</span></font><font color=3Dblack><span =
style=3D'color:black;mso-color-alt:
windowtext'><o:p></o:p></span></font></p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span =
color=3Dblack><span =
/p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span style=3D'font-size:12.0pt;color:black'>My =
mom`s
gonna kill me and if my PC doesn`t work anymore , I`m not gonna get a =
new one
,because I got this one this year . Problems , problems =
!</span></font><font
color=3Dblack><span =
/p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span =
style=3D'font-size:12.0pt;color:black'>What can I do
!</span></font><font color=3Dblack><span =
/p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span =
color=3Dblack><span =
/p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span =
style=3D'font-size:12.0pt;color:black'>Your dear
friend and fellow coder ( with a dieing PC )</span></font><font =
color=3Dblack><span
/p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span =
style=3D'font-size:12.0pt;color:black'>Ferdinand
Greyling</span></font><font color=3Dblack><span =
style=3D'color:black;mso-color-alt:
windowtext'><o:p></o:p></span></font></p>
<p class=3DMsoNormal><span class=3DEmailStyle15><font size=3D3 =
color=3Dblack
face=3D"Times New Roman"><span style=3D'font-size:12.0pt'><![if =
</div>
</html>
------=_NextPart_000_0006_01C06E9F.91BCD160--
6. Re: NOW I now what the hell it is !
------=_NextPart_000_0036_01C06EDA.A131DF60
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
I don't believe viruses can destroy your hardware, it's just your data =
at danger.
In worst case you probably will just need to reinstall Windows, if =
antivirus programs don't destroy the virus, and it'll be ok.
Looks like it's virus time at christmas time. I got one too: =
"Njppkjnj.exe". Looks like it renamed itself.
It's from:
Received: from ferdinand ([196.7.203.82]) by mail.siol.net
(InterMail vK.4.02.00.10 201-232-116-110 license =
3b7ff800a4377eede9efc7be81e8a7c4)
with SMTP id <20001225185824.RTSR4774.mail@ferdinand>
for <tone.skoda at SIOL.NET>; Mon, 25 Dec 2000 19:58:24 +0100
Looks like from you, Ferdinand? 
Do you have me in your addressar?
You probably just send your virus to all the people you have in your =
addressar. You should inform them not to run it.
=20
File has this in it:
=20
<t$=04=81C r c =01 cR "
