[765] in winnt
new virus
daemon@ATHENA.MIT.EDU (Carrie Groves)
Tue Jan 15 14:07:18 2002
Message-Id: <5.0.2.1.2.20020115134930.06bb0d30@hesiod>
Date: Tue, 15 Jan 2002 14:02:29 -0500
To: ntpartners@mit.edu
From: Carrie Groves <cgroves@MIT.EDU>
Cc: gii@mit.edu
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
There is a new virus going around called JS.Gigger.A@mm that I'm sure
you've heard of.
(http://securityresponse.symantec.com/avcenter/venc/data/js.gigger.a@mm.html)
One of the things it does is add a "format c:" to the autoexec.bat file
which executes upon the next reboot. I am writing to verify that this
command will not work upon reboot on an NT 4.0 system because this OS does
not use the autoexec.bat to boot up. Is this right? Or does it use the
autoexec.bat file with the format c: because the virus tells it to? I know
no virus is safe but I want to make sure people in my area understand what
this virus does.
Thank you,
Carrie Groves
Network Administrator, SSIT
Massachusetts Institute of Technology
77 Massachusetts Ave 12-145
Cambridge, Ma 02139
(617)258-0714
<mailto:cgroves@mit.edu>
