I-Worm.Magistr?

Article View: alt.comp.virus

Article #470

#470

From: Tonja
Date: Wed, 30 May 2001 18:57

19 lines
2135 bytes

After downloading "kaspersky lab's avp" the following was found:
(my former virusscanner didn't find infected files though)

C:\WINDOWS\Application
Data\Identities\{6BF20820-9DF2-11D8-B641-B90EF3CAED54}\Microsoft\Outlook
Express\Postvak IN.dbx/
[From:  mail@tonja.nl][Date:  Sun, 6 May 2001 21:00:07 +0200 (MET
DST)]:\IDLE32.EXE infected: I-Worm.Magistr

I think this is about a mail I received from somebody I don't know. It
didn't have an attachment but the text in the mail was in some code.
After deleting the mail I scanned my system for the second time and nothing
was found. Isn't that strange?

At http://www.symantec.com/avcenter/venc/data/w32.magistr.24876@mm.html I
found some scary information about this virus.
Can someone tell me more about this one, I allways read that only
attachments can contain virusses, that isn't true is it?
Thanks in advance.

Technical Details

Message-ID: <jobR6.147346$y7.904341@dbsch1.home.nl>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!skynet.be!newshub1.nl.home.com!news.nl.home.com!dbsch1.home.nl.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fcd68,afd1dab4857ffe53,start
X-Google-Attributes: gidfcd68,public
X-Google-Thread: 1036bc,afd1dab4857ffe53,start
X-Google-Attributes: gid1036bc,public
X-Google-Thread: 1054e1,afd1dab4857ffe53,start
X-Google-Attributes: gid1054e1,public
X-Google-Thread: 1117bf,afd1dab4857ffe53,start
X-Google-Attributes: gid1117bf,public
X-Google-ArrivalTime: 2001-05-30 12:04:42 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!skynet.be!newshub1.nl.home.com!news.nl.home.com!dbsch1.home.nl.POSTED!not-for-mail
From: "Tonja" <mail@tonja.nl>
Newsgroups: alt.comp.virus,demon.tech.pc,alt.comp.viruses,symantec.support.win95_98.nortonantivirus.ver5.general
Subject: I-Worm.Magistr?
Lines: 23
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Message-ID: <jobR6.147346$y7.904341@dbsch1.home.nl>
Date: Wed, 30 May 2001 18:57:19 GMT
NNTP-Posting-Host: 213.51.14.229
X-Complaints-To: abuse@home.nl
X-Trace: dbsch1.home.nl 991249039 213.51.14.229 (Wed, 30 May 2001 20:57:19 MET DST)
NNTP-Posting-Date: Wed, 30 May 2001 20:57:19 MET DST
Organization: @Home Network