Re: ... ANTI_CIH.EXE

["Binand Raj S." <binand@xxxxxxxxxxxxxxxxxxxxx>]

Amarendra GODBOLE forced the electrons to say:
> The above file also came to me as an attachment from someone in Indonesia.
> The surprising thing was that this file came down as a separate mail, before that 
> person's mail, without any message ...

It _is_ a virus. Do a google search on the name to figure out how it
works. It monitors your windows machine for you to send one mail, and
then sends itself to the recipient in a separate mail. It also does the
usual things, like modifying your registry, replacing kernel32.dll etc.

The symantec's web site (which comes up in the google search) has info
on disinfection techniques. It is a fairly recent virus, and seems quite
a buggy one. :-)

Amar, We put up a filter on the retortsoft mail server the moment we
discovered this, but apparently a few copies got through. Sorry.

Binand

-- 
#define l/* Binand Raj S. <binand@xxxxxxxxxxxxxxxxxxxxx> */".%\"-\"("
#define s/* Ambition: To write sendmail.cf from scratch  */abs(abs(i)-5)
main(i,j){for(i=-5;i<6;i++){for(j=0;j<35-s;j++,putchar(32));putchar(s[l]^
108);for(j=0;j<2*s-1;j++,putchar(32));s&&putchar(s[l]^108);putchar(10);}}