This is a windoze type virus that infects the WSOCK32.DLL file.  Look 
for one of the following on your system:

	dwarf4you.exe	
	anpo porn.scr
	atchim.exe
	branca de neve.scr
	dunga.scr
	enano porno.exe
	joke.exe
	midgets.scr
	sexy virgin.scr

Here is a link to a report about it on McAfee's site.

http://vil.mcafee.com/dispVirus.asp?virus_k=98873&

Michael Pratt wrote:

> Someone has a virus on thier machine from this list! I highly recommend 
> doing a search for this file sexy virgin.scr and deleting it. the 
> subject of the message is  
> 
> "Snowhite and the Seven Dwarfs - The REAL story!"
> 
> If you cant delete it you must format and reload your hard drive! Who 
> ever has this IP address 12.75.141.70.
> 
> Return-path: <owner-kclug@marauder.illiana.net 
> <mailto:owner-kclug@marauder.illiana.net>>
> Received: from mta2.rcsntx.swbell.net (mta2-pr.rcsntx.swbell.net)
>  by sims1.rcsntx.swbell.net
>  (Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9)
>  with ESMTP id <0GP900KO15MFTL@sims1.rcsntx.swbell.net 
> <mailto:0GP900KO15MFTL@sims1.rcsntx.swbell.net>>; Tue,
>  1 Jan 2002 03:13:34 -0600 (CST)
> Received: from marauder.illiana.net ([207.227.243.140])
>  by mta2.rcsntx.swbell.net
>  (Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9)
>  with ESMTP id <0GP9000A85SE70@mta2.rcsntx.swbell.net 
> <mailto:0GP9000A85SE70@mta2.rcsntx.swbell.net>>; Tue,
>  01 Jan 2002 03:17:04 -0600 (CST)
> Received: from marauder.illiana.net (marauder [127.0.0.1])
>  by marauder.illiana.net (8.12.1/8.12.1) with ESMTP id g0193s3V005209 for
>  <kclug-list@marauder.illiana.net 
> <mailto:kclug-list@marauder.illiana.net>>; Tue, 01 Jan 2002 03:03:54 -0600
> Received: (from majordom@localhost <mailto:majordom@localhost>)
>  by marauder.illiana.net (8.12.1/8.12.1/Submit)
>  id g0193srA005208 for kclug-list; Tue, 01 Jan 2002 03:03:54 -0600
> Received: from mtiwmhc25.worldnet.att.net
>  (mtiwmhc25.worldnet.att.net [204.127.131.50])
>  by marauder.illiana.net (8.12.1/8.12.1) with ESMTP id g0193o3V005203 for
>  <kclug@kclug.org <mailto:kclug@kclug.org>>; Tue, 01 Jan 2002 03:03:50 -0600
> Received: from leland-riffel ([12.75.141.70]) by mtiwmhc25.worldnet.att.net
>  (InterMail vM.4.01.03.27 201-229-121-127-20010626)
>  with SMTP id 
> <20020101090446.OJAR15547.mtiwmhc25.worldnet.att.net@leland-riffel 
> <mailto:20020101090446.OJAR15547.mtiwmhc25.worldnet.att.net@leland-riffel>> 
> for
>  <kclug@kclug.org <mailto:kclug@kclug.org>>; Tue, 01 Jan 2002 09:04:46 +0000
> Date: Tue, 01 Jan 2002 09:04:55 +0000
> From: Hahaha <hahaha@sexyfun.net <mailto:hahaha@sexyfun.net>>
> Subject: Snowhite and the Seven Dwarfs - The REAL story!
> Sender: owner-kclug@marauder.illiana.net 
> <mailto:owner-kclug@marauder.illiana.net>
> To: mtpratt@swbell.net <mailto:mtpratt@swbell.net>, jfburke@swbell.net 
> <mailto:jfburke@swbell.net>, cliftonc@swbell.net 
> <mailto:cliftonc@swbell.net>,
>  davidwoo@swbell.net <mailto:davidwoo@swbell.net>, mallahan@swbell.net 
> <mailto:mallahan@swbell.net>, sdoerr@swbell.net <mailto:sdoerr@swbell.net>
> Message-id: 
> <20020101090446.OJAR15547.mtiwmhc25.worldnet.att.net@leland-riffel 
> <mailto:20020101090446.OJAR15547.mtiwmhc25.worldnet.att.net@leland-riffel>>
> MIME-version: 1.0
> Content-type: multipart/mixed; boundary="--VE
> 
