In reply to a question I sent out on this list several weeks ago, I received
a reply from [EMAIL PROTECTED]

RAJAH's e-mail (spoofed I believe), contained a self-extracting EXE (i
thought) that according to the e-mail had documents that answered my
question.  I dont normally open any EXE that comes in by e-mail, but this
seemed like a valid response to my question...

As a result, the program proceeded to search all my local drives and set
every file that ended in .DOC, .CPP, .C, .H to 0 length along with killing a
few others that were not as important to me.  Being a programmer, this hurt
bad...I have week old backups of almost everything but this has still cost
me a lot of time and I am not completely done yet.

According to the cert advisory (which I read after I opened this virus), it
can self propagate by responding to e-mails...so anyone that has received an
e-mail from me, I didn't send an attachment...

The day I received this e-mail was 12/15/1999.

RAJAH, if you are not doing this intentionally, your computer is costing
people lots of money.  If you are, then you should count on seeing me in
court.  I will be visiting the local field office of the FBI on monday.

To everyone else on this list...it might be worth your while to run an
antivirus scan on your computer.

-bryanw

http://www.cert.org/advisories/CA-99-06-explorezip.html

Reply via email to