Guest guest Posted March 15, 1999 Report Share Posted March 15, 1999 Dear Ram Chandran, I have been very quiet so far on this list, feeling that I have nothing worthy to share, but enjoying the excellent discussions immensely. I noticed the following announcement at my place of work and pass it on to the members of this list: "... a nasty virus circulating on the Internet. It takes the form of an Internet e-mail. The subject of the e-mail is, and I quote: 'it takes guts to say Jesus'. If you receive an e-mail via the Internet with this title, do not open it, delete it immediately. If you open it the contents of your hard drive will be erased." Namaste, Christel. Quote Link to comment Share on other sites More sharing options...
Guest guest Posted March 15, 1999 Report Share Posted March 15, 1999 Greetings: Thanks for the messages regarding the Virus Alert. I agree with Tim that Virus problems correspond to Emails with attachments. The message below from the Onelist confirms that. The message of Gita regarding the dangers of "attachment" seems applicable also with respect to Email messages! Ram Chandran List Moderator ============================================= Message: Virus Information News from Onelist: Fri, 19 Feb 1999 12:41:43 -0500 (EST) ONElist Tech Support <admin (AT) xxxxxxx (DOT) xxxx Virus Alert Hello, Recently there have been several reports of a virus being passed through lists in attachments. The virus, called Happy99, modifies infected computers so that they spread the virus to other computers through email attachments. For more information on this particular virus, and how to remove it, visit the following web page: http://www.symantec.com/avcenter/venc/data/happy99.worm.html This is a good time to remind people that, in general, they should not open email attachments or run programs from people they do not know. That is how this and other viruses are spread. Thanks, The ONElist Team ================================================================== Get Your Private, Free Email at http://www.hotmail.com Quote Link to comment Share on other sites More sharing options...
Guest guest Posted March 15, 1999 Report Share Posted March 15, 1999 Simply opening an Email and reading it cannot do any damage to anything. One must run an .exe or .bat (batch) file (so don't automatically click on any attachments without being sure of what they are first). It's a popular myth that circulates from time to time that reading a particular mail can cause some damage. In truth, it is impossible for a simple text-based Email to do any harm to anything. With Love, Tim At 08:46 PM 3/15/99 +1000, you wrote: >>>> Dear Ram Chandran, I have been very quiet so far on this list, feeling that I have nothing worthy to share, but enjoying the excellent discussions immensely. I noticed the following announcement at my place of work and pass it on to the members of this list: "... a nasty virus circulating on the Internet. It takes the form of an Internet e-mail. The subject of the e-mail is, and I quote: 'it takes guts to say Jesus'. If you receive an e-mail via the Internet with this title, do not open it, delete it immediately. If you open it the contents of your hard drive will be erased." Namaste, Christel. <<<< ----- The CORE of Reality awaits you at: http://www.eskimo.com/~fewtch/ND/index.html - Poetry, Writings, Live Chat on spiritual topics. Quote Link to comment Share on other sites More sharing options...
Guest guest Posted March 15, 1999 Report Share Posted March 15, 1999 We have received a new virus from multiple sources from around the world. It is called the "Happy99.exe" or "Happy.exe" virus. This virus is a serious one that attacks the mail registry of your computer. If anyone sends you an e-mail with either of the above to programs attached, delete the programs at once. DO NOT OPEN UP THE PROGRAM. The way these two programs work is that they auto-attach themselves to any outgoing e-mails you are sending and then block you from either receiving or sending e-mail. When being executed, the program also opens a window entitled "Happy New Year 1999 !!" showing a firework display to disguise its other actions. The program copies itself as SKA.EXE and extracts a DLL that it carries as SKA.DLL into WINDOWS\SYSTEM directory. It also modifies WSOCK32.DLL in WINDOWS\SYSTEM directory and copies the original WSOCK32.DLL into WSOCK32.SKA. WSOCK32.DLL handles internet-connectivity in Windows 95 and 98. The modification to WSOCK32.DLL allows the worm routine to be triggered when a connect or send activity is detected. When such online activity occurs, the modified code loads the worm's SKA.DLL. This SKA.DLL creates a new email or a new article with UUENCODED HAPPY99.EXE inserted into the email or article. It then sends this email or posts this article. If WSOCK32.DLL is in use when the worm tries to modify it (i.e. a user is online), the worm adds a registry entry: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce=SKA ..EXE The registry entry loads the worm the next time Windows start. Data files from both Norton AV (AntiVirus) and McAfee VirusScan have been updated to detect this virus. Should you accidentally run this program and infect your system, there is also a short "cure" procedure (click on any of the links below for details). Removing the worm manually: 1. Delete WINDOWS\SYSTEM\SKA.EXE 2. Delete WINDOWS\SYSTEM\SKA.DLL 3. In WINDOWS\SYSTEM\ directory, rename WSOCK32.DLL to WSOCK32.BAK 4. In WINDOWS\SYSTEM\ directory, rename WSOCK32.SKA to WSOCK32.DLL 5. Delete the downloaded file, usually named HAPPY99.EXE Windows prevents you to do step #3 and #4 above if the machine is still connected to the Internet. The file "windows\system\wsock32.dll" is used whenever the machine is connected to Internet (i.e. through dial-up or LAN connection). If you are using dial-up connection (i.e. America Online), you need to do the following: 1. Terminate internet connection 2. Delete WINDOWS\SYSTEM\SKA.EXE 3. Delete WINDOWS\SYSTEM\SKA.DLL 4. In WINDOWS\SYSTEM\ directory, rename WSOCK32.DLL to WSOCK32.BAK 5. In WINDOWS\SYSTEM\ directory, rename WSOCK32.SKA to WSOCK32.DLL 6. Delete the downloaded file, usually named HAPPY99.EXE If you are connected to Internet through LAN (i.e. in the office or cable modem), you need to do the following: 1. From the Start menu, select shutdown-restart in MS DOS mode 2. Type CD \windows\system when DOS prompt (C:\)appears 3. Type RENAME WSOCK32.DLL WSOCK32.BAK 4. Type RENAME WSOCK32.SKA WSOCK32.DLL 5. Type DEL SKA.EXE 6. Type DEL SKA.DLL This worm and other trojan-horse type programs demonstrate the need to practice safe computing. One should not execute any executable-file attachment (EXE, SHS, MS Word or MS Excel file) that comes from an email or a newsgroup article from an untrusted source. > > Tim Gerchmez [sMTP:fewtch] > Monday, March 15, 1999 10:19 PM > advaitin > Re: virus warning > > Tim Gerchmez <fewtch > > > Simply opening an Email and reading it cannot do any damage to > anything. > One must run an .exe or .bat (batch) file (so don't automatically > click on > any attachments without being sure of what they are first). > > It's a popular myth that circulates from time to time that reading a > particular mail can cause some damage. In truth, it is impossible for > a > simple text-based Email to do any harm to anything. > > With Love, > > Tim > > At 08:46 PM 3/15/99 +1000, you wrote: > >>>> > > Dear Ram Chandran, I have been very quiet so far on this list, > feeling > that I have nothing worthy to share, but enjoying the excellent > discussions > immensely. > I noticed the following announcement at my place of work and pass it > on to > the members of this list: "... a nasty virus circulating on the > Internet. > It takes the form of an Internet e-mail. The subject of the e-mail > is, and > I quote: 'it takes guts to say Jesus'. If you receive an e-mail via > the > Internet with this title, do not open it, delete it immediately. If > you > open it the contents of your hard drive will be erased." Namaste, > Christel. > > <<<< > > > > ----- > The CORE of Reality awaits you at: > http://www.eskimo.com/~fewtch/ND/index.html - > Poetry, Writings, Live Chat on spiritual topics. > > ---- > -- > Is ONElist important to you? Has it changed your life? > > Come visit our new web site and share with us your stories > ---- > -- > Discussion of the True Meaning of Sankara's Advaita Vedanta Philosophy > focusing on non-duality between mind and matter. List Archives > available at: /viewarchive.cgi?listname=advaitin > Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You are posting as a guest. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.