Merci c'est traduit :)
----- Message d'origine -----
De : MFZ <[EMAIL PROTECTED]>
� : <[EMAIL PROTECTED]>
Envoy� : lundi, 7. juin 1999 12:46
Objet : [Cyber-PC] pretty pak exe
> Si quelq'un pouvait me traduire les lignes principal de cette reponse
donn�
> par symatex � propos du virus ce serait sympa...........
> Merci :)
> [EMAIL PROTECTED]
> -------------------------
> Virus Name: PrettyPark.Worm
> Aliases: Trojan Horse, W32.PrettyPark
> Region Reported: Europe
> Characteristics: Trojan Horse, Worm
>
>
> Description:
> This is a worm program that behaves similar to Happy99 Worm. This worm
> program was originally spread by email spamming from a French email
address.
> The attached program file is named "PrettyPark.EXE". The original report
of
> this worm was submitted through our exclusive Scan&Deliver system on May
28,
> 1999 from France.
> When the attached program called "PrettyPark.EXE" is executed, it may
> display the 3D pipe screen saver. It will also create a file called
> FILES32.VXD in the WINDOWS\SYSTEM directory and modify the following
> registry entry value from "%1" %* to FILES32.VXD "%1" %* without your
> knowledge:
> HKEY_LOCAL_MACHINE\Software\Classes\exefile\shell\open\command
> Once the worm program is executed, it will try to email itself
automatically
> every 30 minutes (or 30 minutes after it is loaded) to email addresses
> registered in your Internet address book. It will also try to connect to
an
> IRC server every 30 seconds and connect to a specific IRC channel. This
> connection can potentially be used maliciously.
> Norton AntiVirus users can protect themselves from PrettyPark.Worm by
> downloading the current virus definitions either through LiveUpdate or
from
> the following web page:
>
> http://www.symantec.com/avcenter/download.html
> Norton AntiVirus will detect PrettyPark.Worm as "Trojan Horse" with June
1,
> 1999 virus definitions.
> Removing this worm manually:
> Delete WINDOWS\SYSTEM\FILES32.VXD
> Using REGEDIT, modify the Registry entry
> HKEY_LOCAL_MACHINE\Software\Classes\exefile\shell\open\command from
> FILES32.VXD "%1" %* to "%1" %*
>
> You may launch REGEDIT through Windows Start-menu-RUN. Then search for
> "FILES32.VXD" in REGEDIT.
>
> Delete the "Pretty Park.EXE" file.
> Reboot your computer.
> You need to do step #2 above; otherwise, executable files may not run
> properly if you simply delete FILES32.VXD
> Safe Computing:
> This worm, and other trojan-horse type programs, demonstrate the need to
> practice safe computing. You should not launch any executable-file
> attachment (EXE, SHS, MS Word or MS Excel file) that comes from an
untrusted
> email or newsgroup source. These files should always be scanned by Norton
> AntiVirus, using the latest virus definitions.
> Write-up Updated by:Raul K. Elnitiarta & Eric Chien
> June 2, 1999
>
>
> Use the index files to locate virus information by name:
> A-Am Dn-Dz H-Hm Kn-Kz O-Om R-Rm U-Um X-Xm
> An-Az E-Em Hn-Hz L-Lm On-Oz Rn-Rz Un-Uz Xn-Xz
> B-Bm En-Ez I-Im Ln-Lz P-Pm S-Sm V-Vm Y-Ym
> Bn-Bz F-Fm In-Iz M-Mm Pn-Pz Sn-Sz Vn-Vz Yn-Yz
> C-Cm Fn-Fz J-Jm Mn-Mz Q-Qm T-Tm W-Wm Z-Zm
> Cn-Cz G-Gm Jn-Jz N-Nm Qn-Qz Tn-Tz Wn-Wz Zn-Zz
> D-Dm Gn-Gz K-Km Nn-Nz 0-9 and Special Characters
>
>
> ___________________________________________________________________
> Un achat en vue? A un prix imbattable? Toutes les caract�ristiques
> de tous les produits! => http://www.cyber-pc.com/ldlc.html <=
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> Cyber PC, la Mailing List du PC! Abonnement / D�sabonnement GRATUIT
> --{ mailto:[EMAIL PROTECTED] }----{ http://www.cyber-pc.com }----
>
>
___________________________________________________________________
Un achat en vue? A un prix imbattable? Toutes les caract�ristiques
de tous les produits! => http://www.cyber-pc.com/ldlc.html <=
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cyber PC, la Mailing List du PC! Abonnement / D�sabonnement GRATUIT
--{ mailto:[EMAIL PROTECTED] }----{ http://www.cyber-pc.com }----
