Internet Insider with David Radin
Internet Insider
Listen/Station List
Show Highlights
Guest List
Free Insider Tip Letter
Ask Your Question
The Insider Team
The WOW
The Stellar List
The Insider Tip
Internet Insider Home

Insider Extras
Insider In-Depth
Insider Tip Letter
Step Up to the Mic
Insider Archives
Insider Guides
The Anti-Virus Page
The Megabyte

Outside the Studio
Our Sponsors
To Sponsor or Advertise
Broadcast the Show
Bookstore
Press Room
Editorial Submissions
Employment
FAQ
Link to Us
Site Map
About Us
Insider Radio Home

Click here to hear great short radio shows, learn helpful computer ideas or subscribe to David's Tip Letter
Insider Radio Network

February 2, 2000

APS Trojan.qa

The APS Trojan.qa virus is based on a trojan initially detected December 27, 1999. This is a password stealing trojan that will, upon activation, attempt to email your AOL screen names and passwords to the virus's controller. In addition, if the victim is logged onto AOL v4.0, it will send itself to AOL screen names listed in your buddylist who are currently logged onto AOL.

We highly recommend updating your anti-virus software's definition files immediately.

If you are infected with the virus, check with your anti-virus software company for assistance in removing it from your system.

Here are some specifics of the virus:

  • The email will have the subject line, "hey you"

  • The body of the email will typically contain this message:

    hey i finally got my pics scanned..theres like 5 or 6 of them..so just download it and unzip it..and for you people who dont know how to then scroll down..tell me what you think of my pics ok?

    if you dont know how to unzip then follow these steps

    When you sign off, AOL will automatically unzip the file, unless you have turned this feature off in your download preferences.

    If you want to do it manually then On the My Files menu on the AOL toolbar, click Download Manager. In the Download Manager window, click Show Files Downloaded. Select my file and click Decompress


  • The attachment will be named, "mine.zip" (or possibly, mine.exe)