<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word" xmlns:st1 =
"urn:schemas-microsoft-com:office:smarttags"><HEAD><TITLE>Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content=Word.Document name=ProgId>
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<META content="Microsoft Word 10" name=Originator><LINK
href="cid:filelist.xml@01C360DA.806E86D0" rel=File-List><o:SmartTagType
name="PersonName"
namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><o:SmartTagType
name="PlaceType"
namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><o:SmartTagType
name="PlaceName"
namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><o:SmartTagType
name="place"
namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if !mso]>
<STYLE>st1\:* {
BEHAVIOR: url(#default#ieooui)
}
</STYLE>
<![endif]-->
<STYLE>@font-face {
font-family: Vladimir Script;
}
@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in 1.25in; mso-header-margin: .5in; mso-footer-margin: .5in; mso-paper-source: 0; }
P.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
LI.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
DIV.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
A:link {
COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline; text-underline: single
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline; text-underline: single
}
P.MsoAutoSig {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
LI.MsoAutoSig {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
DIV.MsoAutoSig {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
SPAN.EmailStyle17 {
COLOR: windowtext; FONT-FAMILY: Arial; mso-style-type: personal-compose; mso-style-noshow: yes; mso-ansi-font-size: 10.0pt; mso-bidi-font-size: 10.0pt; mso-ascii-font-family: Arial; mso-hansi-font-family: Arial; mso-bidi-font-family: Arial
}
SPAN.SpellE {
mso-style-name: ""; mso-spl-e: yes
}
DIV.Section1 {
page: Section1
}
</STYLE>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";}
</style>
<![endif]--></HEAD>
<BODY lang=EN-US style="tab-interval: .5in" vLink=purple link=blue>
<DIV><SPAN class=271501619-12082003><FONT face=Arial color=#0000ff size=2>I
found a thread on the dropper.welder.a Trojan, link is below, watch for
wrapping<BR><A
href="http://www.digifriends.com/message_boards/mboards.mv?action=show_message&go_category=EN0000000002&go_msg=0000014469">http://www.digifriends.com/message_boards/mboards.mv?action=show_message&go_category=EN0000000002&go_msg=0000014469</A></FONT></SPAN></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV align=left><FONT color=#0000ff size=2>Ed Tesiny</FONT></DIV>
<DIV align=left><FONT size=2><A
href="mailto:EdTesiny@oasas.state.ny.us">EdTesiny@oasas.state.ny.us</A></FONT></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT
face=Tahoma size=2>-----Original Message-----<BR><B>From:</B> Reische, Brenda
L. [mailto:blreische@mdh.org] <BR><B>Sent:</B> Tuesday, August 12, 2003 3:03
PM<BR><B>To:</B> 'dba-tech@databaseadvisors.com'<BR><B>Subject:</B> [dba-Tech]
Anyone heard of this virus or trojan??<BR><BR></FONT></DIV>
<DIV class=Section1>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Someone here at work says they
have a <SPAN class=SpellE>welder.a</SPAN> Trojan detected on their computer by
our antivirus software.<SPAN style="mso-spacerun: yes"> </SPAN>I've been
to the antivirus sites and don't find any information on it. <SPAN
style="mso-spacerun: yes"> </SPAN>Anyone heard anything about it??<SPAN
style="mso-spacerun: yes"> </SPAN>What does it do, how to
remove??<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoAutoSig><st1:PersonName
style="BACKGROUND-POSITION: left bottom; BACKGROUND-IMAGE: url(res://ietag.dll/#34/#1001); BACKGROUND-REPEAT: repeat-x"><B
style="mso-bidi-font-weight: normal"><FONT face="Vladimir Script" color=red
size=5><SPAN
style="FONT-WEIGHT: bold; FONT-SIZE: 16pt; COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-bidi-font-weight: normal; mso-no-proof: yes">Brenda
Reische</SPAN></FONT></B></st1:PersonName><B
style="mso-bidi-font-weight: normal"><FONT face="Vladimir Script" color=red
size=5><SPAN
style="FONT-WEIGHT: bold; FONT-SIZE: 16pt; COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-bidi-font-weight: normal; mso-no-proof: yes"><o:p></o:p></SPAN></FONT></B></P>
<P class=MsoAutoSig><FONT face="Vladimir Script" color=red size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-no-proof: yes">Application
Support Analyst<o:p></o:p></SPAN></FONT></P>
<P class=MsoAutoSig><st1:place><st1:PlaceName><FONT face="Vladimir Script"
color=red size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-no-proof: yes">McDonough</SPAN></FONT></st1:PlaceName><FONT
face="Vladimir Script" color=red><SPAN
style="COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-no-proof: yes">
</SPAN></FONT><st1:PlaceType><FONT face="Vladimir Script" color=red><SPAN
style="COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-no-proof: yes">District</SPAN></FONT></st1:PlaceType><FONT
face="Vladimir Script" color=red><SPAN
style="COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-no-proof: yes">
</SPAN></FONT><st1:PlaceType><FONT face="Vladimir Script" color=red><SPAN
style="COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-no-proof: yes">Hospital</SPAN></FONT></st1:PlaceType></st1:place><FONT
face="Vladimir Script" color=red><SPAN
style="COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-no-proof: yes"><o:p></o:p></SPAN></FONT></P>
<P class=MsoAutoSig><FONT face="Vladimir Script" color=red size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-no-proof: yes">www.mdh.org<o:p></o:p></SPAN></FONT></P>
<P class=MsoAutoSig><FONT face="Vladimir Script" color=red size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: red; FONT-FAMILY: 'Vladimir Script'; mso-no-proof: yes">(309)
833-4101<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN
style="FONT-SIZE: 12pt"><o:p> </o:p></SPAN></FONT></P></DIV></BLOCKQUOTE></BODY></HTML>