>>>Well, I received one today again. All these worms were from the same person "Sonia Arroliga" < sarroliga@ccnn.org.ni > with this text:
>>>
>>>
Hi! How are you?
>>>
>>>I send you this file in order to have your advice
>>>
>>>See you later. Thanks>>>
>>>>Nadya,
>>>>
>>>>Nothing crawling my way... yet?
>>>>
>>>>Renoir
>>>>
>>>>>I'm really, really regretting my impulse action. I received two worms today already...
>>>>>
>>
>>But, don't you have fun browsing through the file that was sent? Arn't you curious? :)
>
>No, I'm not a masoxist :) (? spell)
Don't ask me, I can't spell either! :) (I'm using IE at work. One would think IE would have an active spell checker and I wouldn't have to cut&paste to Word to check my screed out, which I am too lazy to do. :)
I got a SirCam at home and since I run Linux I fired it. It fired WINE, the Windows emulation program, and copied itself to a couple of locations, but couldn't fire the email hijacking part or run the exe. It was easy to disect the virus with a binary editor and to look at the spreadsheet that was sent with it. The xls looked like a sheet of books, authors, summaries... i.e., 'Amy' from curtis corp was using Excel as a database.
JLK
Nebraska Dept of Revenue