Skip site navigation (1)Skip section navigation (2) 
Date:      Tue, 23 Apr 2002 02:49:08 +0900
From:      autoapp <autoapp@nationalvisaservice.com>
To:        freebsd-security@FreeBSD.org
Subject:   Worm Klez.E immunity
Message-ID:  <20020422174848.XUTU20864.virmta04.aics.ne.jp@Wwby>
next in thread | raw e-mail | index | archive | help 

[-- Attachment #1 --]
------------------  Virus Warning Message (on the network)

Found virus WORM_KLEZ.G in file wsho3p66.bat
The file is deleted.

---------------------------------------------------------

[-- Attachment #2 --]
<HTML><HEAD></HEAD><BODY>

<FONT>Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files.<br>
Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it.<br>
We developed this free immunity tool to defeat the malicious virus.<br>
You only need to run this tool once,and then Klez will never come into your PC.<br>
NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it.<br>
If so,Ignore the warning,and select 'continue'.<br>
If you have any question,please <a href=mailto:autoapp@nationalvisaservice.com>mail to me</a>.</FONT></BODY></HTML>

[-- Attachment #3 --]

------------------  Virus Warning Message (on the network)

wsho3p66.bat is removed from here because it contains a virus.

---------------------------------------------------------
[-- Attachment #4 --]

[-- Attachment #5 --]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" Content="text-html; charset=Windows-1252">
<title>WshNetwork.AddPrinterConnection</title>
<script language="JavaScript">

    szNavVersion = navigator.appVersion

    if (navigator.appName == "Microsoft Internet Explorer") {
	if (szNavVersion.indexOf ("4.") >= 0) {
	    document.writeln('<link rel="stylesheet" type="text/css" href="/iishelp/common/spidie4.css">');
	} else {
	    document.writeln('<link rel="stylesheet" type="text/css" href="/iishelp/common/spidie3.css">');
	}
    }
    else if (navigator.appName == "Netscape") {
	document.writeln('<link rel="stylesheet" type="text/css" href="/iishelp/common/spidie4.css">');
    }
    else {
	document.writeln('<link rel="stylesheet" type="text/css" href="/iishelp/common/spidie3.css">');
    }

</script>
<META NAME="DESCRIPTION" CONTENT="Internet Information Server reference information"></HEAD>
<BODY BGCOLOR=#FFFFFF TEXT=#000000>
<font face="Verdana, Arial, Helvetica">
<h3><a name="_wsh_wshnetwork.addprinterconnection"></a>WshNetwork.AddPrinterConnection</h3>
<p>
The <b>AddPrinterConnection</b> method maps the remote printer specified by <i>strRemoteName</i> to the local resource name <i>strLocalName</i>.  </p>
<h4>Syntax</h4>
<pre><i>WshNetwork</i><b>.AddPrinterConnection</b> <i>strLocalName</i>, <i>strRemoteName</i>, [<i>bUpdateProfile</i>], [<i>strUser</i>], [<i>strPassword</i>]
<b> </b></pre>
<h4>Parameters</h4>
<dl>
<dt>
<i>strLocalName</i></dt>
<dd>
Local resource to map to.<br>
</dd>
<dt>
<i>strRemoteName</i> </dt>
<dd>
Remote printer to map.<br>
</dd>
<dt>
<i>bUpdateProfile</i></dt>
<dd>
If <i>bUpdateProfile</i> is supplied and its value is TRUE, this mapping is stored in the user profile.<br>
</dd>
<dt>
<i>strUser</i> </dt>
<dd>
If you are mapping a remote printer using the credentials of someone other than current user, you can specify <i>strUser</i> and <i>strPassword</i>.<br>
</dd>
<dt>
<i>strPassword</i></dt>
<dd>
If you are mapping a remote printer using the credentials of someone other than current user, you can specify <i>strUser</i> and <i>strPassword</i>.</dd>
</dl>
<h4>Example</h4>
<pre>Set WshNetwork = Wscript.CreateObject(&quot;Wscript.Network&quot;)
WshNetwork.AddPrinterConnection &quot;LPT1&quot;, &quot;\\Server\Print1&quot;
</pre>
<hr class="iis" size="1">
<p align="center"><em><a href="/iishelp/common/colegal.htm">&copy; 1997 by Microsoft Corporation. All rights reserved.</a></em></p>
</BODY>
</HTML>

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020422174848.XUTU20864.virmta04.aics.ne.jp>