All microsoft operating systems from DOS to ME have scrpt suports that will hide
extensions. I used to do this all the time, for example. (the name of the file
would be Armitage.avi.vbs, Okay so Armitage.avi is the file name, the .vbs is
the extension wich is hidden. All you would see is Armitage.avi) If U use mIRC to
chat you might know about the "LifeStagesVirus". The first writer of this file
jsut made it life stages.vbs. Then the seccond writer made it LifeStages.tvt
BIG SPACE .vbs. This made the space so big that U could not actually see the
true extension. The seccond writer used the microsoft trick to hide the extension
completely.
Here is what U can do to look at the C behind the virus......Hold SHIFT down
while right clicking on the file. A lil box will come up to the right of the file
with your normal listings......BUT since you held shif down there will be a new
option "OpenWith". Click that one. Then another box will come up listing all your
programs. Select the windows progtam called "Notepad.exe". This will only show U
the C and not install anything on your computer.
If you send me the file at Vantage@adams.net I can try and write you a fix.
I bet ten to one that the virus makes a script in your regedit file then renames
it.
bernd@texas.net wrote:
> Unless you show the file extensions, it'll look
> like "Me_Naked.avi"...otherwise, it'll show "Me_Naked.avi.vbs".
>
> - Bernd
>
> > you can't get a virus from the avi file its just data not an executable
> > file. The virus was probably in the html or java scripting of the actual
> > email.
> >
> > Karsh
> >
> > -----Original Message-----
> > From: owner-dakota-truck@BUFFNET.NET
> > [mailto:owner-dakota-truck@BUFFNET.NET]On Behalf Of Dan Burrows
> > Sent: Sunday, July 15, 2001 5:12 PM
> > To: dakota-truck@buffnet.net
> > Subject: Re: DML: Bruces virus?
> >
> >
> > avi. is a movie I bet that is the virus file. I bet that if U opened the
> > file using notepad is would be in a vbs format (visual basic script)
> >
> > Jeff Durling wrote:
> >
> > > Hey Bruce, I just got an email from you that I think was part of your
> > > virus problem. You sent a reply to a question that i asked a few months
> > > back with a picture attached. I deleted it, but not really due to the
> > > virus , but more because of the title of the file. "Me_Nude.avi" Sorry
> > > but that is just too scary for me ; p. BTW, the only thing the reply
> > > said was to look at the picture.
> > >
> > > Jeff Durling
> > > '01 4x2 QC SLT+
> >
This archive was generated by hypermail 2b29 : Fri Jun 20 2003 - 12:02:07 EDT