I received three emails that looked like replies to message trails on emc-pstc. Each had an attachment called "zipped_files.exe". Inoculan detected the virus Worm.ExploreZip.Neolite in the attached files. The emails and attached files were summarily deleted and my entire system checked. No more viruses found. These three emails had subjects of recent emc-pstc threads, but none of these came to me through the emc-pstc server.
The message source address was "jcoll...@cienna.com" Since I did try to open one of these attachments, and even though Inoculan spotted it, and since I use Outlook, it may be that some of you will get emails from me with the attachment. DO NOT OPEN ANY ATTACHMENT WITH NAME OF "zipped_files.exe", Delete the message instead. Scott s_doug...@ecrm.com ECRM Incorporated Tewksbury, MA USA -----Original Message----- From: john.al...@rdel.co.uk [mailto:john.al...@rdel.co.uk] Sent: Wednesday, December 01, 1999 6:37 AM To: emc-p...@majordomo.ieee.org Subject: VIRUS WARNING RE: R&TTE Directive - Transitional periods Importance: Low Hi Folks This is just to warn you that an automatic reply to my posting last night on the above subject resulting in me - and possibly others - being sent a new virus! The message source address was 'david.cl...@spke.com' Do not open any self-extracting ZIP messages attached to emails from this address!! Luckily it was caught by our corporate firewall, but I then received the following message from the people administering the firewall. Their message is given below for your information. Regards John Allen ------------------------------------------------------------------------ --------------------------- Hi, John. The mail sent to you has been confirmed as a virus by Sophos. It's known as "explorezip-b" By the looks of it, the infection results are similar to many others - you run what looks like a self-unzipping file, and the pc is infected, sending the virus to many others - via the local address book, and in response to each received mail thereafter. Steve Steve Lewis IT Executive Racal Defence Electronics Crawley West Sussex UK --------- This message is coming from the emc-pstc discussion list. To cancel your subscription, send mail to majord...@ieee.org with the single line: "unsubscribe emc-pstc" (without the quotes). For help, send mail to ed.pr...@cubic.com, jim_bac...@monarch.com, ri...@sdd.hp.com, or roger.volgst...@compaq.com (the list administrators). --------- This message is coming from the emc-pstc discussion list. To cancel your subscription, send mail to majord...@ieee.org with the single line: "unsubscribe emc-pstc" (without the quotes). For help, send mail to ed.pr...@cubic.com, jim_bac...@monarch.com, ri...@sdd.hp.com, or roger.volgst...@compaq.com (the list administrators).
