Message-Id: <10487.104986@fatcity.com> From: Janardhana Babu Date: Thu, 04 May 2000 14:15:12 -0700 Subject: RE: Virus warning --=====================_10700526==_.ALT Content-Type: text/plain; charset="us-ascii"; format=flowed Bunch of files were renamed to .vbs on my PC. I had removed all those files with extension .vbs, .js and .css, and MSKernel32, Win32DLL.vbs with today's date, and restarted the system. I found the names of these files from the E-Mail posted here by sfcawley@interaccess.com. It is OK now. Thanks for posting the details. I opened it before I read his E-Mail. If anything else I should do, please let me know. Thanks , -- Janardhana Babu At 01:09 PM 5/4/00 -0800, Bowes, Chris wrote: >We're getting clobbered with this thing. No one's had anything renamed >but it's swamping our email system. CA has new a fix out for it in it's >scanner and we just downloaded it from them. Hopefully it will work. > >--Chris >Chris.Bowes@Kosa.com > >-----Original Message----- >From: Paul van Dijken >[mailto:paul.vandijken@sema.nl] >Sent: Thursday, May 04, 2000 10:47 AM >To: Multiple recipients of list ORACLE-L >Subject: Virus warning > >A warning for any mail with the subject "I Love You". >On opening, this mail virus forwards itself to anyone in your contact list. >On opening of the attchment, all files on your harddisk are renamed to *.vsb > >DO NOT OPEN THIS MAIL >DO NOT OPEN THE ATTACHMENT > >This is no hoax. Many companies in Europe are suffering form this virus. At >this moment no anti-virus software is available and it will not be detected >by Anti-virus software. > >Regards >Paul > > >o===============================o >| Paul van Dijken | >| Sema Group Informatica BV | >| Van Houten Industriepark 11 | >| P.O. Box 143 | >| 1380 AC Weesp | >| The Netherlands | >| Phone : (+31) (0) 294-239500 | >| Fax : (+31) (0) 294-239501 | >| e-mail:Paul.Vandijken@sema.nl | >O===============================O > >This e-mail is confidential and intended solely for the use of the >individual to whom it is addressed. Any views or opinions presented are >solely those of the author and do not necessarily represent those of Sema >Group. >If you are not the intended recipient, be advised that you have received >this e-mail in error and that any use, dissemination, forwarding, printing >or copying of this e-mail is strictly prohibited. > >If you have received this e-mail in error, please notify Sema Group >Informatica by telephone on (+31) 294 239 500. > >-- >Author: Paul van Dijken > INET: paul.vandijken@sema.nl > >Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 >San Diego, California -- Public Internet access / Mailing Lists >-------------------------------------------------------------------- >To REMOVE yourself from this mailing list, send an E-Mail message >to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in >the message BODY, include a line containing: UNSUB ORACLE-L >(or the name of mailing list you want to be removed from). You may >also send the HELP command for other information (like subscribing). --=====================_10700526==_.ALT Content-Type: text/html; charset="us-ascii" Bunch of files were renamed to .vbs on my PC. I had removed all those files with extension .vbs, .js and .css, and MSKernel32, Win32DLL.vbs with today's date, and restarted the system. I found the names of these files from the E-Mail posted here by sfcawley@interaccess.com. It is OK now. Thanks for posting the details. I opened it before I read his E-Mail. If anything else I should do, please let me know.

Thanks ,
-- Janardhana Babu

At 01:09 PM 5/4/00 -0800, Bowes, Chris wrote:

We're getting clobbered with this thing.  No one's had anything renamed but it's swamping our email system.  CA has new a fix out for it in it's scanner and we just downloaded it from them.   Hopefully it will work. 

--Chris
Chris.Bowes@Kosa.com

-----Original Message-----
From: Paul van Dijken [mailto:paul.vandijken@sema.nl]
Sent: Thursday, May 04, 2000 10:47 AM
To: Multiple recipients of list ORACLE-L
Subject: Virus warning

A warning for any mail with the subject "I Love You".
On opening, this mail virus forwards itself to anyone in your contact list.
On opening of the attchment, all files on your harddisk are renamed to *.vsb

DO NOT OPEN THIS MAIL
DO NOT OPEN THE ATTACHMENT

This is no hoax. Many companies in Europe are suffering form this virus. At
this moment no anti-virus software is available and it will not be detected
by Anti-virus software.

Regards
Paul

 
o===============================o
|         Paul van Dijken       |
|   Sema Group Informatica BV   |
|  Van Houten Industriepark 11  |
|           P.O. Box 143        |
|          1380 AC Weesp        |
|         The Netherlands       |
| Phone : (+31) (0) 294-239500  |
| Fax   : (+31) (0) 294-239501  |
| e-mail:Paul.Vandijken@sema.nl |
O===============================O

This e-mail is confidential and intended solely for the use of the
individual to whom it is addressed. Any views or opinions presented are
solely those of the author and do not necessarily represent those of Sema
Group.
If you are not the intended recipient, be advised that you have received
this e-mail in error and that any use, dissemination, forwarding, printing
or copying of this e-mail is strictly prohibited.

If you have received this e-mail in error, please notify Sema Group
Informatica by telephone on (+31) 294 239 500.

--
Author: Paul van Dijken
  INET: paul.vandijken@sema.nl

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may