Hi kids -
I got bit by this thing, which exploits a vulnerability in Outlook Express.
While it's not dangerous, it is a pain to clean up. FYI.
Ron
PS - Microsoft patch is now in place to avoid future attacks.
----- Original Message -----
From: David Agnew <[email protected]>
To: Sam & Toby Haberman <[email protected]>
Cc: <[email protected]>
Sent: Tuesday, March 28, 2000 11:47 PM
Subject: [300] ---- Virus Detected ----
>
>
> Sam and Toby,
> I hate to tell you this. My McAfee virus scan has detected
a
> virus in the e-mail message you sent to the 300 listserver. This is the
2nd
> one I have received from the USA in 2 days.I cleaned the same virus off my
> computer yesterday and have just got rid of the one that was detected in
> your message. McAfee says your message is infected with the very same
one.
> The name of this virus is WScript/kak.worm.bat
> I had to go to McAfee's web site to see what it was.I suggest you run your
> virus scan, whatever it is and see if it picks it up. There is a free
> Microsoft 'patch' available form Microsoft's website to get rid of this
> little sucker.When you delete it, you may find that several files have
> disappeared as well in the cleaning process. The virus was in
> C:\AUTOEXEC.bat, and on my computer I had to run the Windows CD ROM to
> restore files after talking to my Helpdesk.It was also in
> C:WINDOWS\SYSTEM\1A30FA20.HTA. The deleted files were BLASTER in
> AUTOEXEC.BAT and DOSSTART in AUTOEXEC.BAT
> I guess that to clean the virus, those files had to go too.
> The below message is from my companies Systems manager.They have every
virus
> checker on the market, so when I get a dodgy message, I forward it to my
> computer at work. If there is a virus, or a hint of one, it cuts it off at
> the pass and sends it back.
> As this is the 2nd SAME virus I have got in 2 days, it may be spreading
> itself around.McAfee has 4 pages on their website about this virus and how
> to get shot of it.It originated in France on Dec 31 1999, so is relatively
> new. Both times I have been infected have been from supposedly 'ordinary'
> e-mail text messages with NO visible attachments.
> I am sending this to the list as well, as others may well have the
> same little problem,
> Regards,
> Dave in New Zealand
>
>
>
>
>
> ----- Original Message -----
> From: <[email protected]>
> To: <[email protected]>
> Cc: <[email protected]>
> Sent: Wednesday, March 29, 2000 4:18 PM
> Subject: ---- Virus Detected ----
>
>
> > Fletcher Challenge Security Manager has stopped
> > the following message:
> >
> > From: [email protected]
> > To: [email protected]
> > Subject: Fw: [300] Transport from Florida to Michigan
> >
> > Because it believes an attachment to this message contains a virus.
> >
> > Please clean the offending file and resend it.
> >
> >
>
>
> To reply to sender, click on Reply to Author.
> To reply to the group, click on Reply to All.
> Address: [email protected]
> Contact: [email protected]
|
|
Back to the Home of the Forward Look Network