|
PureBytes Links
Trading Reference Links
|
I suspect that this was deliberate. There was no other information in the
message except the subject line, the mail headers, and the attached
happy99.exe program. Even if all it does is replicate and display a
fireworks show, it would damage my reputation as a professional if it went
out with (for instance) a resume.
At 03:32 PM 6/9/99 -0700, Mr. Bond wrote:
>Happy99.exe is a virus that is relatively harmless , but that attaches
>itself to outgoing e-mails once you execute it. It plays a fireworks
>display when you execute it. The person who sent you the mail may not have
>been the one that the virus originated with.
>
>Dave
>
>
> >I got the following email a few minutes ago. It had a file (Happy99.exe)
> >attached. I was a bit suspicious, since I'd not heard of this address
> >before, so I scanned the executable in my eudora\attach directory and did
> >not execute it. Sure enough, F-PROT 3.05 tells me that the executable is
> >infected with a virus. Details follow. If any of you can think of anyone
> >else who should be notified of this, please feel free to forward this
> >message as you see fit. I've already notified abuse@xxxxxxxx and
> >sans@xxxxxxxxx If you get a copy of the original of this virus spam, do
> >not execute the happy99.exe program.
> >
> >
> >Search: .
> >Action: Report only
> >Files: Standard file extensions
> >Switches: <none>
> >No viruses found in memory.
> >Hard disk boot sectors were not scanned.
> >
> >G:\PROGRA~1\Qualcomm\EUDORA~1\Attach\HAPPY99.EXE Infection:
>W95/Ska.10000.worm
> >
> >Results of virus scanning:
> >
> >Files: 14
> >MBRs: 0
> >Boot sectors: 0
> >Objects scanned: 14
> >Infected: 1
> >Suspicious: 0
> >Disinfected: 0
> >Deleted: 0
> >Renamed: 0
> >
> >Time: 0:01
> >
> >
> >
> >>X-Persona: <portal>
> >>Received: from mail.rdc1.ab.home.com (imail@xxxxxxxxxxxxxxxxxxxxxxxxx
> >>[24.64.2.50])
> >> by pop3.portal.ca (8.9.1/8.9.1) with ESMTP id OAA04475
> >> for <ufischer@xxxxxxxx>; Wed, 9 Jun 1999 14:12:16 -0700 (PDT)
> >>Received: from 24.64.51.181.ab.wave.home.com ([24.64.51.181])
> >> by mail.rdc1.ab.home.com (InterMail v4.01.01.00 201-229-111)
> >> with SMTP
> >> id
> >>
><19990609211214.GBPD1126.mail.rdc1.ab.home.com@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> >
> >> for <ufischer@xxxxxxxx>; Wed, 9 Jun 1999 14:12:14 -0700
> >>From: James Lucyk <jlucyk@xxxxxxxx>
> >>Subject: Hot Stocks for June
> >>X-Spanska: Yes
> >>Message-Id:
> >><19990609211214.GBPD1126.mail.rdc1.ab.home.com@xxxxxxxxxxxxxxxxxxxxxxxxxxx
>om>
> >>Date: Wed, 9 Jun 1999 14:12:15 -0700
> >>X-UIDL: b2b8b20e18ec92f8bade6aea70890682
> >>
> >
|