[FWDLK] Fw: [300] ---- Virus Detected ----

[Ron Waters <Ronbo97@HOME.COM>]

Hi kids -

I got bit by this thing, which exploits a vulnerability in Outlook Express.
While it's not dangerous, it is a pain to clean up.  FYI.

Ron

PS - Microsoft patch is now in place to avoid future attacks.

----- Original Message -----
From: David Agnew <Fnnutz@xtra.co.nz>
To: Sam & Toby Haberman <sammyh@wwnet.com>
Cc: <chrysler300@ewrx.com>
Sent: Tuesday, March 28, 2000 11:47 PM
Subject: [300] ---- Virus Detected ----


>
>
>  Sam and Toby,
>                 I hate to tell you this. My McAfee virus scan has detected
a
> virus in the e-mail message you sent to the 300 listserver. This is the
2nd
> one I have received from the USA in 2 days.I cleaned the same virus off my
> computer yesterday and have just got rid of the one that was detected in
> your message. McAfee says your message is infected with  the very same
one.
>               The name of this virus is    WScript/kak.worm.bat
> I had to go to McAfee's web site to see what it was.I suggest you run your
> virus scan, whatever it is and see if it picks it up. There is a free
> Microsoft 'patch' available form Microsoft's website to get rid of this
> little sucker.When you delete it, you may find that several files have
> disappeared as well in the cleaning process. The virus was in
> C:\AUTOEXEC.bat, and on my computer I had to run the Windows CD ROM to
> restore files after talking to my Helpdesk.It was also in
> C:WINDOWS\SYSTEM\1A30FA20.HTA. The deleted files were BLASTER in
> AUTOEXEC.BAT and DOSSTART in AUTOEXEC.BAT
>         I guess that to clean the virus, those files had to go too.
> The below message is from my companies Systems manager.They have every
virus
> checker on the market, so when I get a dodgy message, I forward it to my
> computer at work. If there is a virus, or a hint of one, it cuts it off at
> the pass and sends it back.
> As this is the 2nd SAME virus I have got in 2 days, it may be spreading
> itself around.McAfee has 4 pages on their website about this virus and how
> to get shot of it.It originated in France on Dec 31 1999, so is relatively
> new. Both times I have been infected have been from supposedly 'ordinary'
> e-mail text messages with NO visible attachments.
>       I am sending this to the list as well, as others may well have the
> same little problem,
>                              Regards,
>                                       Dave in New Zealand
>
>
>
>
>
> ----- Original Message -----
> From: <mmalert@fcl.co.nz>
> To: <Fnnutz@xtra.co.nz>
> Cc: <daveag@fwp.co.nz>
> Sent: Wednesday, March 29, 2000 4:18 PM
> Subject: ---- Virus Detected ----
>
>
> > Fletcher Challenge Security Manager has stopped
> > the following message:
> >
> >    From:    Fnnutz@xtra.co.nz
> >    To:      daveag@fwp.co.nz
> >    Subject: Fw: [300] Transport from Florida to Michigan
> >
> > Because it believes an attachment to this message contains a virus.
> >
> > Please clean the offending file and resend it.
> >
> >
>
>
> To reply to sender, click on Reply to Author.
> To reply to the group, click on Reply to All.
> Address: chrysler300@ewrx.com
> Contact: rcmerritt@aubcom.com