// COMPLETE THREAD

The virus I got...

4 expanded posts ยท every known parent and child

NODE 27465d86The virus I got...
There was an e-mail sent to the list that had attached to it a virus.  Well
lucky me I got.  It was a .com file that apparently turns your files into
directories.  I can't boot into Win95 since it turned my HIMEM.SYS into a
directory.  So, I seem to have fixed that, but now it says "access denied"
and then prompts me with C:\>.  Did anyone else get it?  Has anyone heard
or fixed this virus?

Thanks

//Vince
NODE 8dde6d64Re: The virus I got...
Delivered-To: reece-cpunks@taz.nceye.net
   Delivered-To: reece@taz.nceye.net
   From: "Vincent Padua" <vincent@psnw.com>
   Date: Tue, 17 Dec 1996 16:41:57 -0800
   X-MSMail-Priority: Normal
   X-Priority: 3
   X-Mailer: Microsoft Internet Mail 4.70.1155
   MIME-Version: 1.0
   Content-Type: text/plain; charset=ISO-8859-1
   Content-Transfer-Encoding: 7bit
   Sender: owner-cypherpunks@toad.com
   Precedence: bulk

   There was an e-mail sent to the list that had attached to it a virus.  Well
   lucky me I got.  It was a .com file that apparently turns your files into
   directories.  I can't boot into Win95 since it turned my HIMEM.SYS into a
   directory.  So, I seem to have fixed that, but now it says "access denied"
   and then prompts me with C:\>.  Did anyone else get it?  Has anyone heard
   or fixed this virus?

Yes.  It's a deadly mutation of the GOOD TIMES virus.

(People actually go to the trouble of stripping off the leading crap
from the uuencoded part and then *run a program* from someone called
Fuck@yourself.up? Furrfu.)
NODE fc0cde39Re: The virus I got...
Bryan Reece wrote:
> 

>    There was an e-mail sent to the list that had attached to it a virus.  Well
>    lucky me I got.  It was a .com file that apparently turns your files into
>    directories.  I can't boot into Win95 since it turned my HIMEM.SYS into a
>    directory.  So, I seem to have fixed that, but now it says "access denied"
>    and then prompts me with C:\>.  Did anyone else get it?  Has anyone heard
>    or fixed this virus?
> 
> Yes.  It's a deadly mutation of the GOOD TIMES virus.
> 
> (People actually go to the trouble of stripping off the leading crap
> from the uuencoded part and then *run a program* from someone called
> Fuck@yourself.up? Furrfu.)

from CIAC,

   http://www-gsb.uchicago.edu/comp_svcs/hoax.html

>From ciac-bulletin@cheetah.llnl.gov  Wed Nov 20 22:14:26 1996
Date: Wed, 20 Nov 1996 20:12:41 -0800 (PST)
Reply-To: crawford@eek.llnl.gov
Originator: ciac-bulletin@cheetah.llnl.gov
Sender: ciac-bulletin@cheetah.llnl.gov
From: crawford@eek.llnl.gov (David Crawford)
To: khopper@midway.uchicago.edu
Subject: CIAC Bulletin H-05: Internet Hoaxes 
X-Listprocessor-Version: 6.0c -- ListProcessor by Anastasios Kotsikonas
Content-Length: 21794

-----BEGIN PGP SIGNED MESSAGE-----


             __________________________________________________________

                       The U.S. Department of Energy
                    Computer Incident Advisory Capability
                           ___  __ __    _     ___
                          /       |     /_\   /
                          \___  __|__  /   \  \___
             __________________________________________________________

                             INFORMATION BULLETIN

            Internet Hoaxes: PKZ300, Irina, Good Times, Deeyenda, Ghost

November 20, 1996 15:00 GMT                                       
Number H-05
______________________________________________________________________________
PROBLEM:       This bulletin addresses the following hoaxes and
erroneous 
               warnings: PKZ300 Warning, Irina, Good Times, Deeyenda,
and 
               Ghost.exe
PLATFORM:      All, via e-mail
DAMAGE:        Time lost reading and responding to the messages
SOLUTION:      Pass unvalidated warnings only to your computer security 
               department or incident response team. See below on how to 
               recognize validated and unvalidated warnings and hoaxes.
______________________________________________________________________________
VULNERABILITY  New hoaxes and warnings have appeared on the Internet and
old 
ASSESSMENT:    hoaxes are still being cirulated.
______________________________________________________________________________

 <snip>  <snip>  <snip>  <snip>  <snip>  <snip>  <snip>  <snip>  <snip> 
<snip> 

Good Times Virus Hoax
=====================

The "Good Times" virus warnings are a hoax. There is no virus by that
name in 
existence today. These warnings have been circulating the Internet for
years. 
The user community must become aware that it is unlikely that a virus
can be 
constructed to behave in the manner ascribed in the "Good Times" virus 
warning. For more information related to this urban legend, reference
CIAC 
Notes 95-09.

http://ciac.llnl.gov/ciac/notes/Notes09.shtml

 <snip>  <snip>  <snip>  <snip>  <snip>  <snip>  <snip>  <snip>  <snip> 
<snip> 

john
NODE 5a40b8e0Re: The virus I got...
Vincent Padua wrote:
> 
> There was an e-mail sent to the list that had attached to it a virus. 
> Well lucky me I got.  It was a .com file that apparently turns your 
> files into

May I ask what on earth possessed you to run on a non-expendable machine
a .COM attached to email sent by a spammer who obviously didn't even
have business-related intentions?
-- 
Vangelis <vangelis@qnis.net> /\oo/\
Finger for public key. PGP KeyID 1024/A558B025
PGP Fingerprint AE E0 BE 68 EE 7B CF 04  02 97 02 86 F0 C7 69 25
Life is my religion, the world is my altar.