[acornlive] Computer Virus Alert!
wndrer@pacbell.net (acornlive@dublinwriters.org)
Tue, 28 Dec 1999 10:40:15 -0800
Greetings, acornlive@dublinwriters.org
I thought you would be interested in knowing about this computer virus...
Virus Name: W32/Fix
Virus Characteristics:
This is a 32bit Worm that travels by sending email messages to users. The
message will come to the user in either Spanish or English, and it will
claim that the attachment is a Y2K Internet bug fix.
hen the attachment is executed the file will copy itself to the
Windows\System directory and make some changes to the users registry keys
so it can attempt to use the mail client and load at Windows startup. The
user will then see a message dispayed that reads
Y2K Ready !!"
<BR>"Your Internet Connection is already Y2K, you don't need to upgrade
it."
<BR>[OK]
<BR>Once a system is rebooted, this worm monitors email received and
searches message content for available email addresses, then uses these to
send a new message with the worm attached. This action is similar, yet
different to the worm W32/Ska. The new message will have a subject line of
Internet problem year 2000."
he message will appear to have come from the company's administrator (ex:
Admin___@domain.com). The text in the message is as follows
Estimado Cliente:
<BR>>
<BR>>Rogamos actualizar y/o verificar su Sistema Operativo para el
<BR>>correcto funcionamiento de Internet a partir del Aņo 2000. Si
<BR>>Ud. es usuario de Windows 95 / 98 puede hacerlo mediante el
<BR>>Software provisto por Microsoft (C) llamado -Fix2001- que se
<BR>>encuentra adjunto en este E-Mail o bien puede ser descargado
<BR>>del sitio WEB de Microsoft (C) HTTP://WWW.MICROSOFT.COM
Si Ud. es usuario de otros Sistemas Operativos, por favor, no
<BR>>deje de consultar con sus respectivos soportes tecnicos.
<BR>>Muchas Gracias.
<BR>> Administrador.
<BR>>
<BR>>
<BR>>Internet Customer:
<BR>>
<BR>>We will be glad if you verify your Operative System(s) before
<BR>>Year 2000 to avoid problems with your Internet Connections.
<BR>>If you are a Windows 95 / 98 user, you can check your system
<BR>>using the Fix2001 application that is attached to this E-Mail
<BR>>or downloading it from Microsoft (C) WEB Site:
<BR>>HTTP://WWW.MICROSOFT.COM
If you are using another Operative System, please don't wait
<BR>>until Year 2000, ask your OS Technical Support.
<BR>>Thanks.
<BR>>
<BR>> Administrator.
his worm runs from the system registry from the following location
KEY_LOCAL_MASHINE\Software\Microsoft\Windows\CurrentVersion\Run Fix2001 =
"FIX2001.EXE"
hen clearing this worm from your system, this entry should be deleted and
then restart the computer to remove the worm from memory.
To check your system for this virus, and to learn how to protect yourself
from computer viruses, visit the McAfee PC Clinic at
http://clinic.mcafee.com.
This email was sent to you by Steve Baba
*==================*==================*
Acorn Live Literary Mailing list
The Dublin Writers' Workshop
***
For list issues, contact: listmaster@dublinwriters.org
To unsubscribe use the form at:
http://www.dublinwriters.org/acornlive/