OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Exploit-Dev Archives: Re: [Fwd: ICQ 2000]

Re: [Fwd: ICQ 2000]

Brad Griffin (griffinbHOTKEY.NET.AU)
Wed, 27 Oct 1999 19:33:06 +1000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey all.
Didn't think to report on that.
I ran it (offline). It attempted to dial-up, I closed the dial-up GUI.
It then proceeded to give all the relevant error messages of bad
parameters etc and shut-down. I have had no trouble with ICQ, no
reports of my UIN spamming anyone etc etc. I rarely use ICQ, but I made
a point of logging on last night to test things and let a few people
know about the worm (sorry folks, my last post said it was a trojan,
it's a worm...sorry, gotta be definitive).
If your ICQ client is playing up, remove it and download the latest
from ICQ. I'll do some registry checks later to see if it changed
anything. However, I don't think it did. It is rather a lame little
program as far as I can see.
Catchyas,

Date sent: Tue, 26 Oct 1999 21:54:52 -0700
Send reply to: Blue Boar <BlueBoarTHIEVCO.COM>
From: Blue Boar <BlueBoarTHIEVCO.COM>
Subject: [Fwd: ICQ 2000]
Originally to: vuln-devsecurityfocus.com
To: VULN-DEVSECURITYFOCUS.COM

> the_huntersgmx.net wrote:
> >
> > I've installed the program, too. But since then, my ICQ doesnt's work.
> > How can I uninstall this trojan.
> >
> > Please help me
> >
>
> I hadn't explored that aspect, not being an ICQ user. Anyone else had a
> similar experience?
>
> Hunters: Did you check your task list to see if it's still running?
> Have you rebooted?
>
> BB

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1 -- QDPGP 2.60
Comment: http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0x6FD78581

iQA/AwUBOBY6MQiK90dv14WBEQLL5gCfaeCoOkaRsbtEnBhU1bq0EK0ie3AAn08J
j8Pzlj7XNRVe4OSFVxl3koHZ
=D4jI
-----END PGP SIGNATURE-----
Brad Griffin
Infotech undergrad & e-mail addict
CQU Rockhampton, Australia
Useful links:
http://www.pgpi.org/
http://spamcop.net/
http://www.avp.ru/

This archive was generated by hypermail 2.0b3 on Wed Oct 27 1999 - 06:40:53 CDT