FLHERNAN-L Archives

Archiver > FLHERNAN > 1999-06 > 0929112800


From: "Deborah Byrd" <>
Subject: Fw: [GAGEN-L] Virus warning = the REAL thing
Date: Fri, 11 Jun 1999 08:53:20 -0600


-----Original Message-----
From: Tim Stowell <>
To: <>
Date: Friday, June 11, 1999 7:39 AM
Subject: [GAGEN-L] Virus warning = the REAL thing

>There is a new virus, "Worm.Explore", which is transmitted through an email
>attachment and which is very dangerous.
>
>If you receive an email which has the attachment "zipped_files.exe" DO NOT
>DOUBLE CLICK ON THIS FILE TO RUN IT. It will destroy vital files on your
>hard drive and on the network.
>
>If you have already run this file, do not turn your computer off. Call
>tech support at once for help.
>
>
>A more detailed description is below.
>
>HOW WORM.EXPLORE WORKS
>The worm -- first discovered in Israel -- enters as an email attachment
>with the name "zipped_files.exe." Its deceptively friendly message reads:
>
>Hi "name of recipient"!
>I received your e-mail and I shall send you a reply ASAP.
>Till then, take a look at the attached zipped docs.
>Bye.
>
>Experts say you should delete it without opening it, and then empty the
>deleted items file.
>
>If it executes, the worm copies itself to the windows system directory with
>the filename "Explore.exe" and then modifies the WIN.INI file so the
>program executes each time Windows starts.
>
>It then uses the infected computer's email client to harvest email
>addresses in order to propagate itself.
>
>But behind the scenes, it plays real mean: searching C through Z drives and
>selecting crucial file extensions and rendering them useless by making them
>0 bytes long. Result: Non-recoverable data or computer system failure.
>
>
>==== GAGEN Mailing List ====
>Have you added something signifigant to your website? Advertise it on this
>list!
>

This thread: