Re: Moving graphics

[jeremy@xxxxxxxxx (Jeremy H. Griffith)]

On Tue, 23 Feb 1999 15:18:31 -0600 (CST), Joel Van Valin <joelv@pbs.com> wrote:

>begin 644 Happy99.exe

... and sent it to the list!  More precisely, it sent *itself*
to the list just before your message.  You are infected; please
clear the infection from your system before you email *anyone*
else!

>From the CIAC Web site:

>Update on Happy99.exe Worm - 02/02/99 

>A computer worm called Happy99.exe has been discovered in the
>wild in Europe and will likely spread to North America.
>Most of the major anti-virus vendors now have updates that will
>allow their software to detect the malicious code.

>Please choose from the link below to download the product you need.
>For McAfee VirusScan 3 (hrlydats):
>http://beta.nai.com/public/datafiles/HRLYDATS.ZIP
>For McAfee VirusScan 4 (extra dat):
>http://beta.nai.com/public/datafiles/extra/w32ska-4.zip
>For Dr Solomon's AVTK (extra driver):
>http://beta.nai.com/public/datafiles/extra/w32ska-7.zip
>For Dr Solomon's VirusScan 4 (extra dat):
>http://beta.nai.com/public/datafiles/extra/w32ska-4.zip

>Other links include:
>For Data Fellows:
>Data Fellows Offers Free Protection Against the Happy99.exe Computer Worm 
>http://www.datafellows.com/news/pr/eng/19990129.htm
>For Symantec:
>Happy99.Worm 
>http://www.symantec.com/avcenter/venc/data/happy99.worm.html

Anyone on the list who has *run* this file is also infected now.
Just downloading it or saving it is harmless; running it causes
the troubles.  If you already have, do *not* reboot your system
until after you have cleaned up; that will make it much worse.

-- Jeremy H. Griffith, at Omni Systems Inc.
  (jeremy@omsys.com)  http://www.omsys.com/

** To unsubscribe, send a message to majordomo@omsys.com **
** with "unsubscribe framers" (no quotes) in the body.   **