My system is clean again now. All that remains is pick up the
dead and wounded files scattered all over my hard drive, thanks
to the son of many fathers who created this "zipped_files.exe"
virus. I got this pathogen from a message picked up from somebody
here on MapInfo-L. I've already recieved this virus from three
others in the last couple of hours. It's real and looks pretty
widespread already. It slips past the virus-scanners unless
you've updated yours in the last 5 days. My last update was two
weeks ago, and my last backup was last Friday. Still, I lost a
few things. Can't be too careful in these cyberspace killing
fields.
This virus is easy to fix, hard to stop once it gets loose, and
it's surprisingly destructive. I am hugging my backup disks like
a favorite teddy bear now.
Thanks to Steve Lackow, here's where you can get info and how to
cure it:
http://www.av.ibm.com/AlertFrame/alertframe.html
In short, just don't run any attachments that have an exe
extention... even if they are from people you know. There's no
good reason for them to send files this way anyway. ZIP or gZIP
is all I'm going to look at any more. Any other attachment gets
trashed.
- Bill
Rob Martinson wrote:
>
> Quick update to this...
>
> I got this as an attachment from you this morning Bill. (oh no!) When run it
> mails the same email with itself attached to people in your address book.
> (I'm using Outlook 2000 on NT4W with SP5). It also eats up memory like mad.
> The way to kill it in NT is....
>
> -Open up task manager and kill the process named zipped_files.exe
> (that's not the last of it!)
> -Restart your machine and login. It has now renamed itself and made a
> registry entry to run on startup. There is now an Explore.exe process (note,
> NOT explorer.exe or iexplore.exe) eating all your memory again. Kill this
> process only from task manager.
> -Delete the file c:\winnt\system32\Explore.exe (again, NOT Explorer.exe)
> -Open up the registry editor and search for the string
> "c:\winnt\system32\Explore.exe" which will be the value of a Run key. DELETE
> IT!
>
> I take no responsibility for anyone that breaks their machine or their arm
> in the above process. Hopefully it helps.....
>
> Rob Martinson
> [EMAIL PROTECTED]
> Directions Magazine - http://www.directionsmag.com
> MP2K Magazine - http://www.mp2kmag.com
----------------------------------------------------------------------
To unsubscribe from this list, send e-mail to [EMAIL PROTECTED] and put
"unsubscribe MAPINFO-L" in the message body, or contact [EMAIL PROTECTED]
