Very sorry! Virus info....

[Rick Parent]

All:

Norton DOES have a def. for this! Has had since 1:47 PST today. It's a
WORM; not a virus.
Big difference. I won't "steal your passwords" as has been suggested. It
won't do anything
at all except replicate itself by sending itself out using your address
book. On the 26th
of January, it will try to direct your browser to a site in the
Netherlands. Probably came
out of there. Here's detailed instructions on how to prevent anything
from happening:

http://www.symantec.com/avcenter/venc/data/vbs.sst@mm.html

It's very easy to remove. Two entries in the Registry and delete the
zero byte file. All
explained at the above link. Don't panic!!

Rick Parent,  W0ZAP
rparent at sky.net

Ed Kotkiewicz wrote:
>
> Jim Roik wrote:
>
> > What does this virus do? I had scanned it with Norton before opening it and
> > was told it was OK. I had trouble deleting it from my hard drive but was
> > finally able to do so. I have today's virus definitions from Norton and I am
> > told I am clean.
> >
> > But...???
> >
> > Jim
>
> EK> Jim, according to the Glowbug list, Norton doesn't have a definition file for it
> yet.  My system stopped it as I have ZoneAlarm set.  It snapped it right up.  As a
> afterthought, I would not open any file with a double extension on it.  As time has
> proven, they all seem to have some sort of virus/worm embedded.
>
> Ed
>
> >
> >
> > If I have an attachment , do not open it.
> >
> > I just found out what it does. How do I get rid of it?
> >
> > > -----Original Message-----
> > > From: Heathkit Owners and Collectors List
> > > [mailto:HEATH at LISTSERV.TEMPE.GOV]On Behalf Of Dave
> > > Sent: Monday, February 12, 2001 2:23 PM
> > > To: HEATH at LISTSERV.TEMPE.GOV
> > > Subject: Very sorry! Virus info....
> > >
> > >
> > > Good Lord!  I have NEVER seen a virus rocket through
> > > the system like this thing!  I JUST did an update at Norton
> > > with my Virus checker (Norton 2001, fully paid version)
> > > RIGHT BEFORE opening my email program.  I have it set
> > > to scan all incoming emails.  It DID NOT see this virus.
> > >
> > > I have checked with Symantic and they are working on it, but
> > > DO NOT HAVE a scanner definition for this virus.
> > >
> > > So those of you who THINK you are scanning properly with
> > > Symantic products, you are NOT being scanned!!!  I just did
> > > it again, and it says I have no viruses.  So beware!
> > >
> > > Sorry my computer spouted more copies of this thing.
> > >
> > > Dave WB7AWK
> > >
> > > ----- Original Message -----
> > > From: "telmore" <telmore at TELMORE.COM>
> > > To: <HEATH at LISTSERV.TEMPE.GOV>
> > > Sent: Monday, February 12, 2001 12:09 PM
> > > Subject: Please Read
> > >
> > >
> > > > Please do not try and open an email from me with the attachment
> > > > AnnaKournikova.jpg.vbs it is a virus.
> > > >
> > > > Thank You
> > > > -Tom
> > > >
> > > > Listserver Subscription:listserv at listserv.tempe.gov - "subscribe heath
> > > 'name' 'call'"
> > > > Listserver Submissions: heath at listserv.tempe.gov
> > > > Listserver Unsubscribe: listserv at listserv.tempe.gov - -"signoff heath"
> > > >
> > >
> > > Listserver Subscription:listserv at listserv.tempe.gov - "subscribe
> > > heath 'name' 'call'"
> > > Listserver Submissions: heath at listserv.tempe.gov
> > > Listserver Unsubscribe: listserv at listserv.tempe.gov - -"signoff heath"
> >
> > Listserver Subscription:listserv at listserv.tempe.gov - "subscribe heath 'name' 'call'"
> > Listserver Submissions: heath at listserv.tempe.gov
> > Listserver Unsubscribe: listserv at listserv.tempe.gov - -"signoff heath"
>
> Listserver Subscription:listserv at listserv.tempe.gov - "subscribe heath 'name' 'call'"
> Listserver Submissions: heath at listserv.tempe.gov
> Listserver Unsubscribe: listserv at listserv.tempe.gov - -"signoff heath"

Listserver Subscription:listserv at listserv.tempe.gov - "subscribe heath 'name' 'call'"
Listserver Submissions: heath at listserv.tempe.gov
Listserver Unsubscribe: listserv at listserv.tempe.gov - -"signoff heath"