[rumori] Happy99.exe

Steev [rumori] Happy99.exe
Thu, 11 Feb 1999 11:14:29 -0800 (PST) (00918760469, Pine.LNX.4.05.9902111109130.13825-100000atflotsam.detritus.net)


wellwell. now i'm glad i dont have a windoze box. anyone who does,
dont run that attachment.

Jon, kindly explain why you posted that to the list. i realize you may not
have realized what it was, but it must have been overtly "cool" or relevant in some way. so, what did it appear to be?

i guess the other explanation might be that someone spoofed Jon
and sent mail to the list, or hacked his account. unlikely, but...

oh and thanx, Sabrina, for bringing this to our attention.

smh


Steev Hise, Automagickal Adept
steevathise.org http://www.cyborganic.com/people/steev recycled art site: http://www.detritus.net -----------------------------------------------------------------
"I declare a permanent state of happiness" -Grafitti, Paris 1968
-----------------------------------------------------------------

---------- Forwarded message ----------
Date: Thu, 11 Feb 1999 10:30:07 -0800
From: Sabrina Austin <sabrinaatuserinterface.com> To: 'Steev' <steevatdetritus.net> Subject: RE: [rumori] The Holden Server

Steve--I received this from my CFO who was forwarded this from his
wife within Cisco.

Rarely do we get emails like this from Cisco IS. I've seen warnings
about
this virus all over our internal website, on walls etc. It must be
pretty
serious. You may want to let your staff know about this one.

--Abby


>Date: Fri, 5 Feb 1999 19:48:07 -0800 (PST)
>From: Jeff Garaventa <jgaravenatcisco.com>
>To: everyone-at-cisco:;
>Subject: Action Required: Virus Alert
>X-Comment: original headers at bottom of message
>
>Cisco IT has received reports of a new virus infection at Cisco. This
new
virus

>is contained in an email attachment called Happy99.exe. Once this
file is

>executed, system files are infected and the file is automatically
attached
to

>every second email sent from the infected machine. We believe this
virus
may

>have spread to many clients across Cisco. The latest version of
VirusScan
virus

>definitions (v3202b) detects, but does not clean this virus.
>
>In response, Cisco IT is scanning all NT servers with the latest
virus

>definitions. If you have received the Happy99.exe attachment but
haven't
opened

>it, delete the file immediately, and install the latest virus
definitions
to

>detect this virus in the future. If you have already opened
Happy99.exe,

>instructions on how to clean this virus can be found at:
>http://wwwin.cisco.com/trc/faq/mcafee_virus_q2.html
>
>Cisco IT distributed the latest virus definitions to non-Engineering
clients in

>EMEA, US Corporate, and Field Sales locations via SMS. The virus
definitions

>have also been posted to PCApps in the US, EMEA and Asia/Americas.
Engineering

>received the latest virus definitions via VirusScan AutoUpdate.
>
>Once virus definitions have been downloaded, we recommend that users
perform a

>manual virus scan as soon as possible. To download the latest virus
>definitions, go to:
>http://wwwin.cisco.com/CustAdv/InfoSys/DesktopServices/is_downloads_f
rames.
html

>
>At the IS Standard Software menu, select McAfee Virus Update DAT
Files.

>Engineering clients can download the latest Engineering version of
VirusScan

>with the v3202b virus definitions at:
>http://wwwin-download.cisco.com
>
>For more information on this virus, please reference:
>http://wwwin.cisco.com/trc/faq/mcafee_virus_q2.html
>
>For further support, contact your local support

-----Original Message-----
From: owner-rumoriatdetritus.net [mailto:owner-rumoriatdetritus.net]On
Behalf Of Steev
Sent: Thursday, February 11, 1999 10:14 AM
To: rumoriatdetritus.net
Subject: Re: [rumori] The Holden Server



Let's try not to send binary attachements to the list,
some people's email readers get choked, the archive will look
really weird, and ... is there a good reason to send them?

oh and the other reason not to is, your attachement was obviously a
dos/windoze binary, which many of us have no ability or desire to
execute.
(there are 7 computers in my house and not one of them is Windoze.)

what was that anyway, jon?

smh

On Thu, 11 Feb 1999 wobblyatcompcurr.com wrote:


>begin 644 Happy99.exe
>M35I0``(````$``\`__\``+at`````````0``:````````````````````````
>*````````````````
>`
>end
>
>________________________
>http://detritus.net
>


Steev Hise, Wannabe Has-Been
steevathise.org http://www.cyborganic.com/people/steev recycled art site: http://www.detritus.net -----------------------------------------------------------------
"A painter paints his picture on canvas. But musicians paint their pictures on silence." -Leopold Stokowski, reprimanding a talkative audience
-----------------------------------------------------------------

________________________
http://detritus.net
________________________
http://detritus.net