A.I.D.S
There is a new virus that appears as a normal e-mail running in the net, it is called
A.I.D.S.
virus. It destroys the Memory, Sound Card, CD and infects the mouse and the keyboard.
Fortunately the virus destroys itself but only after having eaten 5MB of the hard disk and
destroyed all the programs. This virus looks like an email and this title is: “OPEN
VERYCOOL!” Immediately delete this mail.
JOIN THE CREW
Another new virus running in the net appears like an e-mail titled “JOIN
THE CREW”. This one will destroy the whole data in the hard disk of the
computer. So don’t open any e-mails of this kind, and let as many people as possible
know
about them. This is a very new and maligns virus and few people know about its existence.
CIH
CIH, which will activate on April 26th 1999. The virus is CIH 1.2, a strain of the Win
95/CIH
virus family CIH 1.2 (also known as CIH.1003) can
overwrite the hard disk & the flash BIOS of an infected computer, causing complete
loss of
data & possibly rendering the computer unusable.
Happy 99
If you come across an e-mail or newsgroup message with an attached file
called Happy99.exe, don’t download and run it! The file is actually a worm that adds
attachments to e-mail messages and newsgroup postings without the user’s knowledge.
Happy99.exe also known as W32/Ska, W32/Ska-Happy99, Happy99.Worm,
Trojan.Happy99, and I-Worm. Happy99—modifies winsock32.dll so that it can monitor the
postings and mail sent from the machine and then attaches itself to them.
It doesn’t damage your system or corrupt any data, but it can spread like
wildfire if unchecked because it attaches itself to every e-mail you send and every
newsgroup message you post. Happy99Cleaner won’t protect you from the virus, but it
can
get rid of it if you’ve been infected. After you clean out your system, you can check
the
LISTE.SKA file to see a list of e-mail addresses you have sent the virus to and start
writing
those apologies. Get ready to be happy:
The link is:
http://www.download.com/cgi-bin/dl2?pc-0-44617-
http://craig%2emedill%2enwu%2eedu/happy99/Happy99Cleaner%2eexe
"Melissa" Macro Virus
It is a Word 97 or 2000 macro virus delivered via e-mail in an attached
Word document.The e-mail contains the subject line "Important MessageFrom "User
Name" and/or contains the message body "Here is that document you asked for ...
don't show anyone else ;-)". If the attached Word document is opened and the macro
virus is enabled (i.e. it is allowed to run), it can propagate itself by sending e-mail
with the
infected document to a number of recipients. The virus reads a list of e-mail addresses
from the Outlook Address Book and sends an e-mail message to the first 50 recipients
programmatically.
The name of the original infected Word document is "List.doc", but this
could be changed to any name. This virus does not appear to destroy data. If the current
day of the month equals the minute value of the current time, and the infected document
is opened, the following text is inserted at the current cursor position: "Twenty-two
points,
plus triple-word-score, plus fifty points for using all my letters. Game's over. I'm outta
here."
"Papa" Macro Virus
The "Papa" virus, a variant of the "Melissa" virus, is a Microsoft
Excel 97
or Excel 2000 macro virus delivered via e-mail in an attached Excel
document. In the case of the "Papa" virus, the e-mail contains the subject line
"Fwd:
Workbook from all.net and Fred Cohen" and/or contains the message body "Urgent
info
inside. Disregard macro warning." If the attached Excel document (named
"pass.xls") is
opened and the macro is enabled (i.e., is allowed to run), the virus will be activated and
it
will attempt to propagate itself by sending e-mail with the infected document to a number
of recipients. For the virus to send the infected e-mail to others, the Microsoft Outlook
98 or
Outlook 2000 messaging and collaboration client must be on the user's system and be set
up with a working e-mail service.
The "Papa" virus reads the list of e-mail addresses from the Outlook Address
Book and
attempts to send an e-mail message to the first 60 contacts automatically, without the
user's knowledge. In addition, the "Papa" virus may generate commands that
result in
significant network traffic congestion without the user's knowledge.
Although the name of the attached, infected Excel document is "pass.xls",
this could be changed to any name (note: the subject line could be changed as well). The
"Papa" virus does not appear to destroy data.
REMEDY FOR "Papa" & "Melissa" Macro Virus
Run anti-virus software containing the latest update, and scan your system often. Support
for this particular virus is already available from a number of anti-virus companies. The
following Knowledge Base article lists some popular venders.
http://support.microsoft.com/support/kb/articles/Q49/5/00.asp.
Ensure your Office virus protection is turned on. Once the Melissa virus has been allowed
to run, it will disable the virus protection in Word 97 or Word 2000. Remember to make
sure Office macro virus protection is turned on by performing the steps listed above.
07/20/99 04:10:43 PM
