Virus: Original Post?

[Trafton AT]

There seems to be quite a few people affected by the Almega (TSF virus) but I was wondering how it has been spreading? Is there some site somewhere where it is posted? I would kind of like to look at the code. I don't have TSF, so it won't do anything to me. I'm more interested in finding out where it came from and why so many are infected than looking at the code, though.

[JanusJackrabbit]

I think it came from some kind of Warp program for Jazz2.

[>>Møønßlãzé<<]

It's spread by a program called: TSF megawarp.
Somebody have send you it, the virus is activated when you run the program.

[Link]

I think it was originally sent by an email from someone named "Worlock."

Can someone who still has the message post the body of the message and the complete headers here?

This is really the only way to trace it. Since it WAS a trojan, it can be reported to abuse@isp.of.the.sender, and the original IP address may also give us some clue of who it is.

That would be really helpful. In Outlook Express, to view (and copy) the headers, right click on the message and click "Properties", then go to "Details" at the top. Other mail clients will have a similar process.