Klarinet Archive - Posting 000393.txt from 1999/06
From: "Gene Nibbelin" <gnibbelin@-----.com>
Subj: [kl] FW: **** URGENT! NEW VIRUS - PLEASE READ ****
Date: Fri, 11 Jun 1999 20:52:41 -0400
This may be old news by now, but I haven't seen it on the list. My
daughter, who is a professional computer programmer/systems analyst,
forwarded it to me this PM.
Gene Nibbelin
-----Original Message-----
From: Lisa Schiffli [mailto:schiffli@-----.com]
Dratliff@-----. Net; Phil
Burks; Eddie & Billie Neese; Gene & Marjorie Nibbelin; Eric Schiffli
Subject: FW: **** URGENT! NEW VIRUS - PLEASE READ ****
Hi everyone,
I checked this out on the Symantec AntiVirus Research Center web page and it
a true virus, not a hoax. For more information about it and how to repair
things if you accidentally fall victim you can read
http://www.symantec.com/avcenter/venc/data/worm.explore.zip.html
They have it listed as Worm.ExploreZip or W32.ExploreZip Worm. They say it
was discovered in Israel and first reported to them June 6th. The message
below is from the CFO of the NBC television station where I used to work.
Remember, it's generally a good idea to NEVER open any attached files with
the .EXE or .BAT extensions unless you are very, very sure who it is from
and are expecting them to be sending you a program. These current trojan
horse viruses seem to be distributing themselves by taking names from email
address books, so you could receive the virus from an sender that you know,
but they didn't send it.
Lisa
*******************************************************
Lisa Schiffli - Senior Programmer
Burks GenCore Co., Inc.
E-mail- schiffli@-----.com
Web- http://www.GenesisWorld.com
Voice: (941) 772-1329 Fax: (941) 772-1349
*******************************************************
-----Original Message-----
From: Gerry Poppe [mailto:gpoppe@-----.net]
(E-mail); Angie Poppe (E-mail); Anne Edwards (E-mail); Anne Martel (E-mail);
Art Miller (E-mail); Artie L Bedard (E-mail); Becky L Poppe (E-mail); Bill
Demko (E-mail); Bob & Marilyn Rustik (E-mail); Bob Barlow (E-mail); Brian
Poppe (E-mail); Bridgette Dwyer (E-mail); Carolyn Dutkiewicz (E-mail);
Crystal_Reports (E-mail); Dan Caldwell (E-mail); Darrel Adams; Dave & Sue
Fee (E-mail); Dave Hoxeng (E-mail); David Davidson (E-mail); Debbie Zimmerle
(E-mail); Debra Hess (E-mail); Denise Grabowski (E-mail); Dick Shultz
(E-mail); Don Huber (E-mail); Donna M Bean (E-mail); Eileen Morrow (E-mail);
Elaine Rettig (E-mail); Frank Taylor (E-mail); Gary Harpst (E-mail); Gary
Looney (E-mail); George E Brandt (E-mail); GPA Support (E-mail); Harold B
Wright (E-mail); Herbert J Anderson (E-mail); Jack Davidson (E-mail); James
K Corrigan (E-mail); Janice Morrison (E-mail); Janie Sims (E-mail); Javanet
(E-mail); Jennifer Modlin (E-mail); John Belisle (E-mail); John F Makofske
(E-mail); Jose Garcia (E-mail); Joseph Derosa (E-mail); Judy & Thom Rohde
(E-mail); Judy Gilby (E-mail); Julie Reinhardt (E-mail); Karen Detert
(E-mail); Kathy Hughes (E-mail); Ken Ono (E-mail); Kerry Keating (E-mail);
Leroy Dietrich (E-mail); Linda Hammer (E-mail); Linda Lata (E-mail); Lisa
Schiffli (E-mail); Lowell Putnam (E-mail); Lyle Olsen (E-mail); Lynn Huckaby
(E-mail); Marilyn J. Poppe (E-mail); Mark Kunkel (E-mail); Mark Vitt
(E-mail); Martha Freeman (E-mail); Martin A. Redovan (E-mail); Mary & Jerry
Wipf (E-mail); Mary Tinker (E-mail); Melissa D Trapp (E-mail); Michael J
Holmes (E-mail); Michael Ott (E-mail); Mike & Jody Raddatz (E-mail); Pastor
Dick Miller (E-mail); Pastor Steven Hess (E-mail); Peter Adam Deb Hess
(E-mail); Qi Qin (E-mail); Rich & Carol Zeltman (E-mail); Robert Helgeson
(E-mail); Ron Klages (E-mail); Ron Pierce (E-mail); Russell T. Baker CPA
(E-mail); Scott & Amy Morrow (E-mail); Scott Kelley (E-mail); Sonja S
Erskine (E-mail); Steve & Eileen Morrow (E-mail); Steven Dubnoff (E-mail);
Stowe T. Gardner (E-mail); Theodore W. Kiser (E-mail); Tom Talbot (E-mail);
Tom Whitner (E-mail); Troy Poppe (E-mail); Trudy Helgeson (E-mail); Zilla &
Sam Harding (E-mail)
Subject: FW: **** URGENT! NEW VIRUS - PLEASE READ ****
Got this note late yesterday from MSNBC. Please be careful with any
attachments you get in the next few days. If you have any doubts, don't
open any attachments.
Subject: **** URGENT! NEW VIRUS - PLEASE READ ****
******************************************************
URGENT! NEW VIRUS ALERT - PLEASE READ THIS
******************************************************
A new, very nasty melissa-type virus just hit us. If you get a message that
looks the example below, under no circumstance click on the attachment. It
will delete all Excel and Word files it can find, and do it again every 30
minutes. This is a very nasty one.
The VIRUS e-mails itself out as an attachment with the filename
"zipped_files.exe" in reply to unread messages it finds in your Inbox.
Thus, the e-mail message may appear to come from a known e-mail
correspondent in response to a previously sent e-mail. The e-mail contains
the following text:
Hi Recipient Name!
I received your email and I shall send you a reply ASAP. Till then, take a
look at the attached zipped docs. bye or sincerely Recipient Name Once the
attachment is executed, it may display the following window:
In addition the virus searches drives C through Z of your computer system
and selects a series of files to destroy based on file extensions (including
.h, .c, .cpp, .asm, .doc, .xls, .ppt) by calling CreateFile(), and making
them 0 bytes long. You may notice extended hard drive activity when this
occurs. This can result in non-recoverable data. This payload routine
continues to happen while the worm is active on the system. Thus, any newly
created files matching the extensions list will be destroyed as well.
-------------------------------------------------------------------------
Unsubscribe from Klarinet, e-mail: klarinet-unsubscribe@-----.org
Subscribe to the Digest: klarinet-digest-subscribe@-----.org
Additional commands: klarinet-help@-----.org
Other problems: klarinet-owner@-----.org
