DeTomaso Mailing List: June 99, Message #239

Pay attention and do not open any file attached to an e-mail message unless
the person who sent the message personally vouches for the attached file.

HPB

-----Original Message-----

This appeared on Infoworld Online today at:
http://www.infoworld.com/cgi-bin/displayStory.pl?990610.envirus.htm

New e-mail-transported virus spreads over Net

  By Matthew Nelson
  InfoWorld Electric

  Posted at 10:41 AM PT, Jun 10, 1999
A new virus, with the same modus operandi of the Melissa virus, is
currently spreading across the Internet, deleting large numbers of files
and altering the Win.any file when users reboot.

Tentatively called the ExplorerZip virus, it is propagating itself using
the same API as Melissa, and arrives with an e-mail message stating:

"Hi [Name] ! I received your e-mail and I shall send you a reply ASAP. Till
then, take a look at the attached zipped docs. bye."

Attached is a zip file named Zip_files.exe.

If activated, a fake error message will appear to the user, then the virus
searches the local file drive for the following file types and deletes
them: .c, .cpp, .asm, .doc, .sls, .ptp -- thereby deleting Microsoft Word,
Excel, and PowerPoint files.

A second executable file will then alter the Win.any file, instructing the
client to run an explorer.exe file delivered by the virus in place of the
standard operating system when the user reboots.

The ExplorerZip virus propagates itself much like Melissa by searching
address books and then mailing itself to those users, but it is unknown at
this time how many addresses it replicates itself to.

Several anti-virus vendors are currently aware of the virus and are working
on a fix for the attack.

------------

Ross

----------------------------------------------------------------------------
-
Get involved in the ABA LPM Computer & Technology Division!
See you at ABA TECHSHOW 2000 Next March in Chicago!
See you at the Fairfax Law & Technology Conference in DC, June 14!
See you at the Oklahoma Bar's Solo/Small Firm Conference June 17-18!
----------------------------------------------------------------------------
-
Ross L. Kodner, Esq.
President, MicroLaw, Inc. - Milwaukee, Wisconsin (414-476-8433)
Chair - ABA Law Practice Mgmt. Section - Computer & Technology Division
Board Member: ABA TECHSHOW 2000, NYC LegalTech September '99
E-Mail: rkodner@microlaw.com, rkodner@ix.netcom.com
Web: http://www.microlaw.com
E-Fax: 603-754-0833
Plain 'ole FAX: 414-476-8461