Quick update to this...
I got this as an attachment from you this morning Bill. (oh no!) When run it
mails the same email with itself attached to people in your address book.
(I'm using Outlook 2000 on NT4W with SP5). It also eats up memory like mad.
The way to kill it in NT is....
-Open up task manager and kill the process named zipped_files.exe
(that's not the last of it!)
-Restart your machine and login. It has now renamed itself and made a
registry entry to run on startup. There is now an Explore.exe process (note,
NOT explorer.exe or iexplore.exe) eating all your memory again. Kill this
process only from task manager.
-Delete the file c:\winnt\system32\Explore.exe (again, NOT Explorer.exe)
-Open up the registry editor and search for the string
"c:\winnt\system32\Explore.exe" which will be the value of a Run key. DELETE
IT!
I take no responsibility for anyone that breaks their machine or their arm
in the above process. Hopefully it helps.....
Rob Martinson
[EMAIL PROTECTED]
Directions Magazine - http://www.directionsmag.com
MP2K Magazine - http://www.mp2kmag.com
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Bill Thoen
Sent: Wednesday, December 01, 1999 12:08 PM
To: [EMAIL PROTECTED]
Subject: MI zipped_files.exe is aVIRUS!!!!
I'm sending this from a safe site (using old fashoined Pine mailer), but
if you get any mail with the attached file "zipped_files.exe" trash it.
This thing is not trapped by last month's Mcafee virus scan, and it got
past me too. Some people on my addres book got sent this virus. It
appears to send out itself through email.
- Bill Thoen
----------------------------------------------------------------------
To unsubscribe from this list, send e-mail to [EMAIL PROTECTED] and put
"unsubscribe MAPINFO-L" in the message body, or contact [EMAIL PROTECTED]
----------------------------------------------------------------------
To unsubscribe from this list, send e-mail to [EMAIL PROTECTED] and put
"unsubscribe MAPINFO-L" in the message body, or contact [EMAIL PROTECTED]
