-Caveat Lector- ----- Original Message ----- From: "McAfee.com Dispatch" <[EMAIL PROTECTED]> Sent: Tuesday, December 07, 1999 10:17 PM Subject: Virus Alert - W95/Babylonia > (((((((((((((((((( McAfee.com Dispatch ))))))))))))))))))))) > > _______________________VIRUS ALERT__________________________ > > > [This message is brought to you as a subscriber to the > McAfee.com Dispatch. To unsubscribe, please follow the > instructions at the bottom of the page.] > > > ************** VIRUS ALERT - W95/Babylonia ***************** > > > Dear McAfee.com Dispatch Subscriber: > > > W95/Babylonia is a polymorphic virus. AVERT has given it a > risk assessment of Medium--On Watch. > > The virus was first distributed on at least one newsgroup > as a help file called "serialz.hlp". When executed, the > virus infects .EXE and .HLP files, in some cases damaging > them beyond repair. Upon infection, the virus creates a > file called KERNEL32.EXE, which monitors system activity > for Internet connection. When it detects an Internet > connection, it attempts to connect to a Web site hosted > by a virus authoring group, and if successful, it downloads > additional components of the complete virus to the host PC. > > If the virus detects mIRC installed on the host PC, it will > attempt to send a copy of itself through Internet IRC > channels, as a file called "2KBug-MircFix.exe". The virus > also sends an email notification to the address > [EMAIL PROTECTED], with the "from" information > listed as [EMAIL PROTECTED] > > Note: If you are using McAfee Clinic, please click here to > update Active Shield(TM). > -> http://clinic.mcafee.com/clinic/virusscan/activeshield/start.asp > > --McAfee.com > > > _______________________Virus Fixes__________________________ > > > Find out more about this virus. Click here to go to the > W95/Babylonia Help Center. > -> http://www.mcafee.com/viruses/babylonia > > > Check if your system is infected, click here to use > VirusScan Online. > -> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1111 > > > Purchase the latest copy of VirusScan, please click here. > -> http://store.mcafee.com/category.asp?CatID=3&CategoryLevel=1&rfr=VSCALRT > > > Upgrade to the latest VirusScan. Purchase the VirusScan > Maintenance Plan which entitles you to 12 months of > upgrades, click here. > -> http://store.mcafee.com/category.asp?CatID=18&CategoryLevel=1&rfr=VRSPLN > > > Download the latest DAT files, click here. > -> http://download.mcafee.com/updates/updates.asp > > > ______________________Special Offer_________________________ > > > Check out our new lower prices in the McAfee Store > -> http://store.mcafee.com/default.asp?rfr=DISPRM > or give McAfee Clinic Subscriptions to friends and family > for the holidays... and save up to an additional 20% too! > -> http://clinic.mcafee.com/clinic/giftcert/default.asp?rfr=cln_dsp > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > > If this message has been passed on to you by a friend and > you would like to subscribe to the > McAfee.com Dispatch, click here. > -> http://www.mcafee.com/subscribe/beginI.asp?s=22 > > This Virus Alert has been issued by the Network Associates > Anti-Virus Emergency Response Team (AVERT). McAfee.com is a > wholly owned subsidiary of Network Associates. > > Copyright 1999 McAfee.com / All Rights Reserved. > > ______________________________________________________________________ > This message was sent by McAfee.com using Responsys Interact. DECLARATION & DISCLAIMER ========== CTRL is a discussion and informational exchange list. Proselyzting propagandic screeds are not allowed. Substance�not soapboxing! These are sordid matters and 'conspiracy theory', with its many half-truths, misdirections and outright frauds is used politically by different groups with major and minor effects spread throughout the spectrum of time and thought. That being said, CTRL gives no endorsement to the validity of posts, and always suggests to readers; be wary of what you read. CTRL gives no credeence to Holocaust denial and nazi's need not apply. Let us please be civil and as always, Caveat Lector. ======================================================================== Archives Available at: http://home.ease.lsoft.com/archives/CTRL.html http:[EMAIL PROTECTED]/ ======================================================================== To subscribe to Conspiracy Theory Research List[CTRL] send email: SUBSCRIBE CTRL [to:] [EMAIL PROTECTED] To UNsubscribe to Conspiracy Theory Research List[CTRL] send email: SIGNOFF CTRL [to:] [EMAIL PROTECTED] Om
