Hello,
Perhaps this is the one?
http://vil.nai.com/vil/dispvirus.asp?virus_k=98881
Thanks for the heads up!
Shannon
At 07:57 AM 11/8/00 -0800, David JL Rieger wrote:
>Good Day,
>
>I have a user who opened an attachment on her computer that, he reports
>(this is a home box), launched a button in Spanish saying something to the
>effect "do not push the dos button". They had an eyeball icon on the
>attachment (they're using Eudora). Three things then happened.
>
>1.) They received a "gray box" message from our computer saying that it
>could not access our applications, because it could not find the
>"winsvrc.exe" file
>2.) An eyeball icon appeared in the bottom righthand corner of the screen
>3.) They saw the Spanish language message.
>
>They cannot access their applications. They can still access their web
>however. They, however, continue to get the "gray box" message.
>
>I had the user check their attachment directory to see what files were
>recently received there and I was told there is a "navidad" file as well
>as a file that appears iconographically as a bar-code.
>
>All my searches with anti-virus intelligence sources has not come up with
>anything but this email originated in Morocco via France. Has any body
>heard of something like this? Or could this be something new or something
>isolated that unintendedly had these consequences?
>
>Thank you for your input.
>
>Best Regards,
>
>David Rieger
>
>
>------------------------------------------------------------------------
>The following was automatically added to this message by the list server:
>
>For information about Micronet, its meetings and events, and its
>mailing list, including information on subscribing and unsubscribing,
>see the Micronet Web site at <URL:http://wss.berkeley.edu/micronet/>.
------------------------------------------------------------------------
The following was automatically added to this message by the list server:
For information about Micronet, its meetings and events, and its
mailing list, including information on subscribing and unsubscribing,
see the Micronet Web site at <URL:http://wss.berkeley.edu/micronet/>.
This archive was generated by hypermail 2b29 : Wed Nov 08 2000 - 09:08:11 PST