hi,

thanks, matthias, for this heads-up.  i 'searched' my drives and found 4 copies of 'unwise.exe'.  our service center provides a good firewall, so i don't think that these files were part of a virus.

phil

-----Original Message-----
From: Matthias Mansfeld [mailto:[log in to unmask]]
Sent: Sunday, November 10, 2002 10:00 PM
To: [log in to unmask]
Subject: Re: [TN] greeting card virus


On 11 Nov 2002 at 12:15, [log in to unmask] wrote:

> It's called, appropriately, "unwise.exe" and locates itself in
> C:/program files/common files, and may be copied from
> C:/winnt/system32 and C:/winnt/downloaded program files. Easiest is to
> check all files that were amended on the day you downloaded from the
> website (if you did). I hope that's all that's needed. Anyone else
> have other advice?

...but be aware, unwise.exe is also often the name of an uninstaller
created by the installation tools from a company named Wise. Then it
is mostly located in the directory with the program files it belongs
to.

Regards
Matthias
--
Matthias Mansfeld Elektronik * Leiterplattenlayout, Bestueckung
Am Langhoelzl 11, 85540 Haar; Tel.: 089/4620 093-7, Fax: -8
Internet: http://www.mansfeld-elektronik.de
GPG Public Key:
http://www.mansfeld-elektronik.de/gnupgkey/mansfeld.asc

---------------------------------------------------
Technet Mail List provided as a free service by IPC using LISTSERV 1.8e
To unsubscribe, send a message to [log in to unmask] with following text in
the BODY (NOT the subject field): SIGNOFF Technet
To temporarily halt or (re-start) delivery of Technet send e-mail to [log in to unmask]: SET Technet NOMAIL or (MAIL)
To receive ONE mailing per day of all the posts: send e-mail to [log in to unmask]: SET Technet Digest
Search the archives of previous posts at: http://listserv.ipc.org/archives
Please visit IPC web site http://www.ipc.org/html/forum.htm for additional
information, or contact Keach Sasamori at [log in to unmask] or 847-509-9700 ext.5315
-----------------------------------------------------

---------------------------------------------------
Technet Mail List provided as a free service by IPC using LISTSERV 1.8e
To unsubscribe, send a message to [log in to unmask] with following text in
the BODY (NOT the subject field): SIGNOFF Technet
To temporarily halt or (re-start) delivery of Technet send e-mail to [log in to unmask]: SET Technet NOMAIL or (MAIL)
To receive ONE mailing per day of all the posts: send e-mail to [log in to unmask]: SET Technet Digest
Search the archives of previous posts at: http://listserv.ipc.org/archives
Please visit IPC web site http://www.ipc.org/html/forum.htm for additional
information, or contact Keach Sasamori at [log in to unmask] or 847-509-9700 ext.5315
-----------------------------------------------------