Dear All

There is something funny going on here.

I received :


Attachment Converted: "C:\TEMP\READER_DIGEST_LETTER.TXT.pif"

from Yong-Fei Zheng .

I received no virus warning BUT when I dissected the message it contained
these lines (between asterisks):

**************************************
t!@
README.TXT.pif
I_wanna_see_YOU.TXT.pif
MATRiX_Screen_Saver.SCR
LOVE_LETTER_FOR_YOU.TXT.pif
NEW_playboy_Screen_saver.SCR
BILL_GATES_PIECE.JPG.pif
TIAZINHA.JPG.pif
FEITICEIRA_NUA.JPG.pif
Geocities_Free_sites.TXT.pif
NEW_NAPSTER_site.TXT.pif
METALLICA_SONG.MP3.pif
ANTI_CIH.EXE
INTERNET_SECURITY_FORUM.DOC.pif
ALANIS_Screen_Saver.SCR
READER_DIGEST_LETTER.TXT.pif
WIN_$100_NOW.DOC.pif
-- More  --

IS_LINUX_GOOD_ENOUGH!.TXT.pif
QI_TEST.EXE
AVP_Updates.EXE
SEICHO-NO-IE.EXE
YOU_are_FAT!.TXT.pif
FREE_xxx_sites.TXT.pif
I_am_sorry.DOC.pif
Me_nude.AVI.pif
Sorry_about_yesterday.DOC.pif
Protect_your_credit.HTML.pif
JIMI_HMNDRIX.MP3.pif
HANSON.SCR
FUCKING_WITH_DOGS.SCR
MATRiX_2_is_OUT.SCR
zipped_files.EXE
BLINK_182.MP3.pif





Software provide by [MATRiX] VX team:
Ultras, Mort, Nbk, LOrd DArk, Del_Armg0, Anaktos
Greetz:

All VX guy on #virus channel and Vecna
Visit us: www.coderz.net/matrix
 %8@@
 %<@@
 %@@@

lstrcat
GetSystemDirectoryA
GetWindowsDirectoryA
GetFileSize
CloseHandle
CreateFileA
GetFileTime
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetFilePointer
SetEndOfFile
SetFileTime
VirtualAlloc
VirtualFree
GetSystemTime

*****************************************

among many others.  I am worried to see the name of my attachment in the
list.  Could this be a list of possible names for attachments sent by a
virus?

Perhaps Andrew did not receive the same thing?

My advice is do not run it for the moment.

Hilary

.

Hilary Le Q. Stuart-Williams Ph.D.
(Climate, behaviour study and ecology using stable isotopes)
Research Officer - Stable Isotope Laboratory
School of Environmental Sciences, University of East Anglia
Norwich NR4 7TJ, England
Telephone 01603 593837 (Work), 01603 507719 (Fax)
 01603 503430 (Home)

More data at : www.uea.ac.uk/~sil/