[1477] in WWW Security List Archive
hoax raises head again...
daemon@ATHENA.MIT.EDU (Louis Numkin)
Tue Feb 13 17:45:16 1996
Date: Tue, 13 Feb 1996 13:58:39 -0500
From: Louis Numkin <LMN@nrc.gov>
To: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
I've received three inquiries from employees within the past month to add to
my year-and-a-half old collection of "Good Times" virus warnings. Have
any of you ever found anything to be "REAL" regarding this old hoax?
Has anyone actually been bitten by it or gotten a copy of it for diagnosis?
Please respond so I can try to lay this latest fear to rest. Thanks in
advance...
Louis
Received: from igate.nrc.gov by irm12 (5.x/TMD1.7)
id AA09932; Thu, 8 Feb 1996 13:30:30 -0500
Received: from news1.radix.net by igate.nrc.gov (4.1/TMD1.6)
id AA11605; Thu, 8 Feb 96 13:30:34 EST
Received: from LOCALNAME (dialin51.annex2.radix.net [204.157.135.102]) by news1.radix.net (8.6.12/8.6.9) with SMTP id NAA16775 for <phl@nrc.gov>; Thu, 8 Feb 1996 13:30:39 -0500
Date: Thu, 8 Feb 1996 13:30:39 -0500
Message-Id: <199602081830.NAA16775@news1.radix.net>
X-Sender: robtd@pop.radix.net
X-Mailer: Windows Eudora Version 1.4.5
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
To: phl@nrc.gov
From: robtd@radix.net (RobertDavid)
Subject: (Fwd) (Fwd) copy of VIRUS mail
>Comments: Authenticated sender is <bobd@[204.7.57.2]>
>From: "Bob Deegan" <bobd@es1.multimax.com>
>To: robtd@radix.net
>Date: Thu, 8 Feb 1996 11:32:00 +0000
>Subject: (Fwd) (Fwd) copy of VIRUS mail
>Priority: normal
>Content-Length: 3181
>
>FYI - Better be careful. I will talk to you later
>
>
>------- Forwarded Message Follows -------
>From: "Aldrin W. Leung" <MMI_CDT/ALDRIN>
>Organization: Multimax, Inc.
>To: All Employees Nationwide
>Date: Thu, 8 Feb 1996 11:25:26 -0500
>Subject: (Fwd) copy of VIRUS mail
>
>------- Forwarded Message Follows -------
>Date: Thu, 8 Feb 96 11:08:15 EST
>From: gupta (Indra Gupta)
>To: aldrin
>Subject: copy of VIRUS mail
>Cc: gupta
>
>Subject: Virus Warning!
>From: "Ferry, Daniel" <dferry@cscgt.gsfc.nasa.gov> at inetgt
>Date: 2/6/96 2:50 PM
>
>
>FYI
>
>______________________________ Forward Header
__________________________________
>
> *************************************************************
> WARNING!!!!!!! INTERNET VIRUS
>
> The FCC released a warning last Wednesday concerning a
> matter of major importance to any regular user of the
> Internet. Apparently a new computer virus has been
> engineered by a user of AMERICA ON LINE that is unparalleled
> in its destructive capability. Other more well-known viruses
> such as "Stoned", "Airwolf" and "Michaelangelo" pale in
> comparison to the prospects of this newest creation by a
> warped mentality. What makes this virus so terrifying, said
> the FCC, is the fact that no program needs to be exchanged
> for a new computer to be infected. It can be spread through
> the existing e-mail systems of the Internet. Once a computer
> is infected, one of several things can happen. If the
> computer contains a hard drive, that will most likely be
> destroyed. If the program is not stopped, the computer's
> processor will be placed in an nth-complexity infinite binary
> loop -which can severely damage the processor if left running
> that way too long.
>
> Unfortunately, most novice computer users will not
> realize what is happening until it is far too late. Luckily,
> there is one sure means of detecting what is now known as the
> "Good Times" virus. It always travels to new computers the
> same way in a text email message with the subject line
> reading "Good Times". Avoiding infection is easy once the
> file has been received- not reading it! The act of loading
> the file into the mail server's ASCII buffer causes the "Good
> Times" mainline program to initialize and execute.
>
> The program is highly intelligent- it will send copies of itself to
> everyone whose e-mail address is contained in a receive-mail file
> or a sent-mail file, if it can find one. It the computer it is
running on. The bottom line here is - if you
> receive a file with the subject line "Good Times", delete it
> immediately! Do not read it" Rest assured that whoever's name was
> on the "From" line was surely struck by the virus. Warn your
> friends and local system users of this newest threat to the
> Internet! It could save them a lot of time and money.
>
>
>
>
>
>
>
>(-: Aldrin :-)
>