I was able to recover everything because I have Norton Utilities. Norton protected the "deleted" files that the virus attacked.
Thanks to Scott Lacey for pointing this out. ---------------------------- /\ | Martin Rowe | / \ | Senior Technical Editor | / \ /\ | Test & Measurement World | / \ / \ /\ ____ | voice 617-558-4426 |/ \ / \ / \/ | fax 617-558-4470 | \ / \/ | e-mail [email protected] | \ / | http://www.tmworld.com | \/ ---------------------------- ---------- > From: Scott Douglas <[email protected]> > To: [email protected]; [email protected] > Subject: RE: VIRUS WARNING RE: R&TTE Directive - Transitional periods > Date: Wednesday, December 01, 1999 09:46 AM > > > I received three emails that looked like replies to message trails on > emc-pstc. Each had an attachment called "zipped_files.exe". Inoculan > detected the virus Worm.ExploreZip.Neolite in the attached files. The emails > and attached files were summarily deleted and my entire system checked. No > more viruses found. These three emails had subjects of recent emc-pstc > threads, but none of these came to me through the emc-pstc server. > > The message source address was "[email protected]" > > Since I did try to open one of these attachments, and even though Inoculan > spotted it, and since I use Outlook, it may be that some of you will get > emails from me with the attachment. DO NOT OPEN ANY ATTACHMENT WITH NAME OF > "zipped_files.exe", Delete the message instead. > > Scott > [email protected] > ECRM Incorporated > Tewksbury, MA USA > > > -----Original Message----- > From: [email protected] [mailto:[email protected]] > Sent: Wednesday, December 01, 1999 6:37 AM > To: [email protected] > Subject: VIRUS WARNING RE: R&TTE Directive - Transitional periods > Importance: Low > > > > Hi Folks > > This is just to warn you that an automatic reply to my posting last night > on the above subject resulting in me - and possibly others - being sent a > new virus! > > The message source address was '[email protected]' > > Do not open any self-extracting ZIP messages attached to emails from this > address!! > > Luckily it was caught by our corporate firewall, but I then received the > following message from the people administering the firewall. Their > message > is given below for your information. > > Regards > > John Allen > > ----------------------------------------------------------------- ------- > --------------------------- > > Hi, John. > > The mail sent to you has been confirmed as a virus by Sophos. It's known > as > "explorezip-b" By the looks of it, the infection results are similar to > many others - you run what looks like a self-unzipping file, and the pc is > infected, sending the virus to many others - via the local address book, > and > in response to each received mail thereafter. > > Steve > > Steve Lewis > IT Executive > Racal Defence Electronics > Crawley > West Sussex > UK > > --------- > This message is coming from the emc-pstc discussion list. > To cancel your subscription, send mail to [email protected] > with the single line: "unsubscribe emc-pstc" (without the > quotes). For help, send mail to [email protected], > [email protected], [email protected], or > [email protected] (the list administrators). > > > > > > --------- > This message is coming from the emc-pstc discussion list. > To cancel your subscription, send mail to [email protected] > with the single line: "unsubscribe emc-pstc" (without the > quotes). For help, send mail to [email protected], > [email protected], [email protected], or > [email protected] (the list administrators). --------- This message is coming from the emc-pstc discussion list. To cancel your subscription, send mail to [email protected] with the single line: "unsubscribe emc-pstc" (without the quotes). For help, send mail to [email protected], [email protected], [email protected], or [email protected] (the list administrators).
