Klarinet Archive - Posting 001194.txt from 2000/12

From: "Mark Charette" <charette@-----.org>
Subj: Re: [kl] VIRUS
Date: Sat, 23 Dec 2000 13:29:35 -0500

From: "Tony Wakefield" <tony-wakefield@-----.net>
> I`ve just heard (Radio 4 Today news in U.K.) that there is a virus due to
> strike on Christmas Day, if you switch on, on that day. Boxing Day (St
> Stephens Day O.K.). The usual anti-virus software will <deal> with it
tho`.
> It is supposed to not enable you to switch on your `puter again, after it
> (if it does) strikes.
> I expect Mark will have it in hand, - if it`s not already in someone
> else`s - - - - - -

Viruses have a really hard time getting through this mailing list since I
automatically (programmatically - the computer does the work, not me) filter
out anything that isn't demonstrably text.

This Dec. 25th virus is a reality and a worry. Please, everyone who is
running a computer make sure you have an anti-virus program up, running, and
protecting you by check9ing all emails before they're delivered to you. It's
a bother, I know, but think of the cost of rebuilding your system. I assume
you all have backups for your critical data. Right? You did copy all that
stuff you spent hundred of hours preparing onto CD-R or tape or Zip or
floppy some other removable media. Right? You removed the re-writable stuff
from the computer. Right?

Yeah, right .8^) About 5% of the people I know regularly backup their
computers. The other 95% believe in miracles happening to them personally. I
know they believe in God, because I've heard them say "Oh God, noooooo! Not
me! Not now!"

>From http://www.norton.com/avcenter/venc/data/w32.kriz.html
-----------
W32.Kriz
Discovered on: August 11, 1999
Last Updated on: December 14, 2000 0 10:16:50 AM PST

W32.Kriz was first discovered in the Fall of 1999. The virus infects files
on Windows 9x and Windows NT/2000 systems.

The virus has a dangerous payload that triggers on December 25th of any
year. The payload is designed to overwrite files on the floppy disk drive,
hard drive, RAM drive, and network drives. It also clears the information
stored on the BIOS. This payload is similar to the W95.CIH virus.

Since October of 2000, SARC has received an increase in submissions of the
virus. SARC believes the spread of W32.Kriz gained momentum when several
wild spread worms were infected by W32.Kriz and helped spread the virus.

---------------------------------------------------------------------
Unsubscribe from Klarinet, e-mail: klarinet-unsubscribe@-----.org
Subscribe to the Digest: klarinet-digest-subscribe@-----.org
Additional commands: klarinet-help@-----.org
Other problems: klarinet-owner@-----.org