IDM Mailing Archive

(apologies for crossposting) Dear listmembers: I always scan attachments for viruses before I open them and yet have just encountered a problem I can't seem to solve. A friend emailed me a document entitled 1stpressrelease.pdf.pif When i downloaded it to my desktop, it showed up not as a document, but as a shortcut with the MSDOS icon. When I tried to open it up in the newest version of Adobe Acrobat, it wouldn't work, so I threw it in the recylce bin and then emptied the bin (and emailed my friend who sent me the attachment). I thought all was well, but I've just found that there is now a program in my startup called befy.exe; i have scanned this file about ten times and my updated norton antivirus doesn't say it is a virus, but there doesn't seem to be any way I can delete this file; a properties query tells me that it is an application. I'm quite anxious because I have gigs here in Halifax tomorrow and Friday nights and then I leave for a mini-tour on Tuesday, so I definitely want to get this application off my computer and make sure everything is A-OK. Any help would be super appreciated. Thank you. Andrew Duke out now: Environmental Politics http://and-oar.org Take Nothing For Granted http://acidfake.tk Sprung http://bip-hop.com http://warprecords.com/mart/music/release.php? cat=BLEEP12&fc_type=CD *Canadian electronica album of the year nominee* More Destructive Than Organized http://staalplaat.com Highest Common Denominator http://pieheadrecords.com Physical and Mental Health http://dialrecords.com 74'02 (split with Hypo) http://tsunami-addiction.com Waveforms: Halifax Electronic Music Compilation http://techno.ca/cognition --------------------------------------------------------------------- To unsubscribe, e-mail: idm-unsubscribe@hyperreal.org For additional commands, e-mail: idm-help@hyperreal.org

A .pif extension is an old dos executable format so yes that probably is a virus. If you have run it you are most likely infected. It is actually probably more a worm than a virus, they disguise themselves as other people you know to spread. (in kinda lamers terms) With Kind regards Lee Stacey Email : lee@codeaudio.com Tel : +44 (0) 1444 870794 Mob : +44 (0) 7734 414385 -----Original Message----- From: andrewduke@canada.com [mailto:andrewduke@canada.com] Sent: 23 July 2003 00:05 To: microsound@hyperreal.org; idm@hyperreal.org; 313@hyperreal.org Subject: [idm] question/help re: questionable program/possible virus (ot) (apologies for crossposting) Dear listmembers: I always scan attachments for viruses before I open them and yet have just encountered a problem I can't seem to solve. A friend emailed me a document entitled 1stpressrelease.pdf.pif When i downloaded it to my desktop, it showed up not as a document, but as a shortcut with the MSDOS icon. When I tried to open it up in the newest version of Adobe Acrobat, it wouldn't work, so I threw it in the recylce bin and then emptied the bin (and emailed my friend who sent me the attachment). I thought all was well, but I've just found that there is now a program in my startup called befy.exe; i have scanned this file about ten times and my updated norton antivirus doesn't say it is a virus, but there doesn't seem to be any way I can delete this file; a properties query tells me that it is an application. I'm quite anxious because I have gigs here in Halifax tomorrow and Friday nights and then I leave for a mini-tour on Tuesday, so I definitely want to get this application off my computer and make sure everything is A-OK. Any help would be super appreciated. Thank you. Andrew Duke out now: Environmental Politics http://and-oar.org Take Nothing For Granted http://acidfake.tk Sprung http://bip-hop.com http://warprecords.com/mart/music/release.php? cat=BLEEP12&fc_type=CD *Canadian electronica album of the year nominee* More Destructive Than Organized http://staalplaat.com Highest Common Denominator http://pieheadrecords.com Physical and Mental Health http://dialrecords.com 74'02 (split with Hypo) http://tsunami-addiction.com Waveforms: Halifax Electronic Music Compilation http://techno.ca/cognition --------------------------------------------------------------------- To unsubscribe, e-mail: idm-unsubscribe@hyperreal.org For additional commands, e-mail: idm-help@hyperreal.org --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.501 / Virus Database: 299 - Release Date: 14/07/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.501 / Virus Database: 299 - Release Date: 14/07/2003 --------------------------------------------------------------------- To unsubscribe, e-mail: idm-unsubscribe@hyperreal.org For additional commands, e-mail: idm-help@hyperreal.org

To add to that, check you're not running any abnormal processes (ctrl alt del). If you are, search for that process on the web... With Kind regards Lee Stacey Email : lee@codeaudio.com Tel : +44 (0) 1444 870794 Mob : +44 (0) 7734 414385 -----Original Message----- From: StaticBeats [mailto:intelligence@staticbeats.com] Sent: 23 July 2003 00:24 To: idm@hyperreal.org; andrewduke@canada.com Subject: Re: [idm] question/help re: questionable program/possible virus (ot) Your best bet is to check the Symantec Security Response website: http://securityresponse.symantec.com/ I did a quick search on google for the files you mentioned and nothing came up. It sounds like you got a virus though because of the .pdf.pif extension :( Shimone/Justes http://www.staticbeats.com > Electronic Music > Digital Culture http://www.boomboombap.com > First Come > First Heard ----- Original Message ----- From: <andrewduke@canada.com> To: <microsound@hyperreal.org>; <idm@hyperreal.org>; <313@hyperreal.org> Sent: Tuesday, July 22, 2003 4:05 PM Subject: [idm] question/help re: questionable program/possible virus (ot)

quoted 28 lines (apologies for crossposting)

> (apologies for crossposting) > > Dear listmembers: > > I always scan attachments for viruses before I open > them and yet have just encountered a problem I can't > seem to solve. > > A friend emailed me a document entitled > 1stpressrelease.pdf.pif > > When i downloaded it to my desktop, it showed up not as > a document, but as a shortcut with the MSDOS icon. > When I tried to open it up in the newest version of > Adobe Acrobat, it wouldn't work, so I threw it in the > recylce bin and then emptied the bin (and emailed my > friend who sent me the attachment). I thought all was > well, but I've just found that there is now a program > in my startup called befy.exe; i have scanned this file > about ten times and my updated norton antivirus doesn't > say it is a virus, but there doesn't seem to be any way > I can delete this file; a properties query tells me > that it is an application. I'm quite anxious because I > have gigs here in Halifax tomorrow and Friday nights > and then I leave for a mini-tour on Tuesday, so I > definitely want to get this application off my computer > and make sure everything is A-OK. Any help would be > super appreciated. Thank you. Andrew Duke

--------------------------------------------------------------------- To unsubscribe, e-mail: idm-unsubscribe@hyperreal.org For additional commands, e-mail: idm-help@hyperreal.org --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.501 / Virus Database: 299 - Release Date: 14/07/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.501 / Virus Database: 299 - Release Date: 14/07/2003 --------------------------------------------------------------------- To unsubscribe, e-mail: idm-unsubscribe@hyperreal.org For additional commands, e-mail: idm-help@hyperreal.org