CRM-ADMIN - Infected File Attached to CRM message

FDCptn_at_aol.com
Sat, 6 Mar 1999 18:25:11 EST


Good Afternoon CRMers -

While I do not usually allow notifications of viruses on the list, I am making
an exception in this case. A message posted to the list by Dbair_at_mho.net
(David L. Bair) earlier today had a file attached named "Happy99.exe". This
message carries the subject line: "Leadership Training", and contains no text
in the body of the message.

THE ATTACHED FILE IS INFECTED WITH A CONFIRMED VIRUS. DO NOT ATTEMPT TO RUN
THIS FILE. READING THE EMAIL MESSAGE ALONE WILL *NOT* INFECT YOUR COMPUTER.
DELETE THE "HAPPY99.EXE" FILE IMMEDIATELY.

Since it is possible that this was a deliberate act, I have unsubscribed Mr.
Bair from the list and consider him to be banned unless he can convince me
that this was an accident.

There is additional information available on this virus, which I have included
below. As always, it is considered good practice to have your computer
equiped with virus protection software. Never open a file or run a program
that comes from an unknown source.

Best regards,
Neil Krey
neilkrey_at_aol.com
http://members.aol.com/neilkrey/

---------------

HAPPY99.EXE is a confirmed "worm" or "Trojan Horse" type of virus that is
currently circulating via e-mail and newsgroups. It infects only Windows
systems, Macs are not affected. If you're using Windows and receive
HAPPY99.EXE as a mail attachment, do not run it - simply go to the folder
where your attachments are stored and delete the file.

Note that like most viruses, this one is dormant and does nothing unless you
actually run it - simply receiving it as an attachment does nothing. Of
course, if you're using an e-mail program that allows you to configure it to
open mail attachments automatically - and if you have set it to do so - well,
you're pretty much a sitting duck for this kind of thing!

The impact of actually running this program is more annoying than destructive
- it simply modifies a few of your Windows system files that in turn allow the
virus to continue propagating itself to other systems and flood mail servers
with an avalanche of junk mail.

Data files from both Norton AV (AntiVirus) and McAfee VirusScan have been
updated to detect this virus. Should you accidentally run this program and
infect your system, there is also a short "cure" procedure (click on any of
the links below for details).

In general, it is always a good idea to avoid running programs you might
receive as unsolicited e-mail attachments unless you are fully aware of (and
confident in) the source. Most of the ones that do damage are disguised as
something funny or cute that are intended to attract maximum attention. If you
can't resist having a look and are not running current anti-virus software,
you're asking for trouble!

Here's a list of further sources of information on HAPPY99.EXE and other
viruses:

Symantec AntiVirus Center - http://www.symantec.com/avcenter
McAfee/NAI Virus Info Library - http://www.nai.com/vinfo/

------------------------------------------------------------------------------

--