Article View: a2000.security
Article #3virus alert
From: Rob*
Date: Mon, 04 Oct 1999 00:00
Date: Mon, 04 Oct 1999 00:00
35 lines
2255 bytes
2255 bytes
Moderator's Note: I have checked on this virus and it is legitimate, not a hoax. Go to: http://www.xtrasite.co.nz/help/securityalert.html#pretty ....and you will find detailed information on many viruses including the hoax "It Takes Guts to Say Jesus". Thanks Vania for this information. Hi Steve, There's a new virus going around. It was send to a Brasilian astrology list, it's the PrettyPark.exe Description: This is a worm program that behaves similar to Happy99 Worm. This worm program was originally spread by email spamming from a French email address. The attached program file is named "PrettyPark.EXE". The original report of this worm was submitted through our exclusive Scan&Deliver system on May 28, 1999 from France. Area of Infection: C:\Windows\System, Registry, Email Attachments When the attached program called "PrettyPark.EXE" is executed, it may display the 3D pipe screen saver. It will also create a file called FILES32.VXD in the WINDOWS\SYSTEM directory and modify the following registry entry value from "%1" %* to FILES32.VXD "%1" %* without your knowledge: HKEY_LOCAL_MACHINE\Software\Classes\exefile\shell\open\command Once the worm program is executed, it will try to email itself automatically every 30 minutes (or 30 minutes after it is loaded) to email addresses registered in your Internet address book. Abra๏ฟฝos, Vania ------- End of forwarded message -------
Technical Details
Message-ID:
<7tb2m5$c57$1@weber.a2000.nl>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII X-Google-Thread: 10ff42,20f7767fe0066f07,start X-Google-Attributes: gid10ff42,public X-Google-Thread: f9eed,20f7767fe0066f07,start X-Google-Attributes: gidf9eed,public X-Google-Thread: fd87a,20f7767fe0066f07,start X-Google-Attributes: gidfd87a,public From: "Rob*" <Vinkrob@cable.a2000.nl> Subject: virus alert Date: 1999/10/04 Message-ID: <7tb2m5$c57$1@weber.a2000.nl> X-Deja-AN: 532795506 X-Priority: 3 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 X-Complaints-To: abuse@a2000.nl X-Trace: weber.a2000.nl 939068933 12455 24.132.4.191 (4 Oct 1999 20:28:53 GMT) Organization: A2000 Kabeltelevisie en Telecommunicatie X-MSMail-Priority: Normal NNTP-Posting-Date: 4 Oct 1999 20:28:53 GMT Newsgroups: a2000.security,a2000.discussie,alt.madcrew