I did some searching online and found:

The original Auto=start virus was called AutoStart 9805.
It named itself DB and Desktop Print Spooler

9805-B named itself DB and Desktop Printr Spooler
(extinct, dies in 1998)

9805C renames/kills old variants, names itselt DELDB and DELDDesktop 
Print Spooler (extinct, dies in 1998)

9805D renames/kills old variants, names itselt DELDB and DELDDesktop 
Print Spooler (extinct, dies in 1998)

9805E names itselt DELDB and DELDDesktop Print Spooler (extinct, dies in 
1999)

9805F is most similar to A and E variants, and names itself DB and 
Desktop Print Spooler. Is still "alive".

Note: C and D variants were the original author trying to stop the virus, 
E and F were most likely  some other hacker trying to keep it spreading.

There were several CD's published infected with this virus, from 
MacAddict, Hoyle's Classic Card games and Casino, Linux R5, Wacom, 
Digital Performer, Arboretum, and more. Fortunately, all these variants 
are expired.

So change my advice:

Only create two files, DB and Desktop Print Spooler. Put DB on the 
highest volume level, and Desktop Print Spooler in the Extensions folder 
and you are protected. 

(I no longer feel the need to worry about all this, as I long ago 
disabled Quicktime's autostart feature)

BTW: I believe one can also prevent this from spreading by disabling the 
Quicktime auto-start feature. 

Mark James
SoftRAID, LLC
mjames@ softraid.com


$ chown -R us:us yourbase

(If you have no clue to the above, don't worry, be happy)



___________________________________________________________________________
To unsubscribe send a mail message with a SUBJECT line of "unsubscribe" to
<[EMAIL PROTECTED]>  or  <[EMAIL PROTECTED]>

Reply via email to