๐Ÿš€ go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: a2000.security
Article #3

virus alert

#3
From: Rob*
Date: Mon, 04 Oct 1999 00:00
35 lines
2255 bytes
Moderator's Note:  I have checked on this virus
and it is legitimate, not a hoax.          Go to:
http://www.xtrasite.co.nz/help/securityalert.html#pretty
....and you will find detailed information on many viruses including the
hoax
"It Takes Guts to Say Jesus".  Thanks Vania for this information.

Hi Steve,

There's a new virus going around. It was send to a Brasilian astrology
list, it's the PrettyPark.exe


Description:
This is a worm program that behaves similar to Happy99 Worm. This worm
program was originally spread by email spamming from a French email
address. The attached program file is named "PrettyPark.EXE". The
original report of this worm was submitted through our exclusive
Scan&Deliver system on May 28, 1999 from France. Area of Infection:
C:\Windows\System, Registry, Email Attachments When the attached
program called "PrettyPark.EXE" is executed, it may display the 3D
pipe screen saver. It will also create a file called FILES32.VXD in
the WINDOWS\SYSTEM directory and modify the following registry entry
value from "%1" %* to FILES32.VXD "%1" %* without your knowledge:
HKEY_LOCAL_MACHINE\Software\Classes\exefile\shell\open\command

Once the worm program is executed, it will try to email itself automatically
every 30 minutes (or 30 minutes after it is loaded) to email addresses
registered in your Internet address book.

Abra๏ฟฝos,
Vania


------- End of forwarded message -------
Technical Details
Message-ID: <7tb2m5$c57$1@weber.a2000.nl>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII
X-Google-Thread: 10ff42,20f7767fe0066f07,start
X-Google-Attributes: gid10ff42,public
X-Google-Thread: f9eed,20f7767fe0066f07,start
X-Google-Attributes: gidf9eed,public
X-Google-Thread: fd87a,20f7767fe0066f07,start
X-Google-Attributes: gidfd87a,public
From: "Rob*" <Vinkrob@cable.a2000.nl>
Subject: virus alert
Date: 1999/10/04
Message-ID: <7tb2m5$c57$1@weber.a2000.nl>
X-Deja-AN: 532795506
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
X-Complaints-To: abuse@a2000.nl
X-Trace: weber.a2000.nl 939068933 12455 24.132.4.191 (4 Oct 1999 20:28:53 GMT)
Organization: A2000 Kabeltelevisie en Telecommunicatie
X-MSMail-Priority: Normal
NNTP-Posting-Date: 4 Oct 1999 20:28:53 GMT
Newsgroups: a2000.security,a2000.discussie,alt.madcrew