[rumori] Happy99.exe

Steev [rumori] Happy99.exe
Thu, 11 Feb 1999 12:40:58 -0800 (PST) (00918765658, Pine.LNX.4.05.9902111237030.15605-100000atflotsam.detritus.net)

On Thu, 11 Feb 1999, Boster, Bob wrote:

>It was a little graphic .exe that ran a little fireworks animation
>without any problem on the (accursed) Wintel box we have to deal with
>here at work.

well, the point was that that file may be a virus. like the
message i forwarded fromthe Cisco folks says, it's recommended that you
get the latest version of whatever virus detectors you use and
scan all the machines that ran it.

>What did it do you all "more righteous OS folks"?

nothing. to me it looked like a blob of text in my mail reader, because
pine didnt interpret the mime-attachment as anything useful.


>>>Date: Fri, 5 Feb 1999 19:48:07 -0800 (PST)
>>>From: Jeff Garaventa <jgaravenatcisco.com>
>>>To: everyone-at-cisco:;
>>>Subject: Action Required: Virus Alert
>>>X-Comment: original headers at bottom of message
>>>Cisco IT has received reports of a new virus infection at Cisco. This
>>>is contained in an email attachment called Happy99.exe. Once this
>>file is
>>>executed, system files are infected and the file is automatically
>>>every second email sent from the infected machine. We believe this
>>>have spread to many clients across Cisco. The latest version of
>>>definitions (v3202b) detects, but does not clean this virus.
>>>In response, Cisco IT is scanning all NT servers with the latest
>>>definitions. If you have received the Happy99.exe attachment but
>>>it, delete the file immediately, and install the latest virus
>>>detect this virus in the future. If you have already opened
>>>instructions on how to clean this virus can be found at:
>>>Cisco IT distributed the latest virus definitions to non-Engineering
>>clients in
>>>EMEA, US Corporate, and Field Sales locations via SMS. The virus
>>>have also been posted to PCApps in the US, EMEA and Asia/Americas.
>>>received the latest virus definitions via VirusScan AutoUpdate.
>>>Once virus definitions have been downloaded, we recommend that users
>>perform a
>>>manual virus scan as soon as possible. To download the latest virus
>>>definitions, go to:
>>>At the IS Standard Software menu, select McAfee Virus Update DAT
>>>Engineering clients can download the latest Engineering version of
>>>with the v3202b virus definitions at:
>>>For more information on this virus, please reference:
>>>For further support, contact your local support
>>-----Original Message-----
>>From: owner-rumoriatdetritus.net [mailto:owner-rumoriatdetritus.net]On
>>Behalf Of Steev
>>Sent: Thursday, February 11, 1999 10:14 AM
>>To: rumoriatdetritus.net
>>Subject: Re: [rumori] The Holden Server
>>Let's try not to send binary attachements to the list,
>>some people's email readers get choked, the archive will look
>>really weird, and ... is there a good reason to send them?
>>oh and the other reason not to is, your attachement was obviously a
>>dos/windoze binary, which many of us have no ability or desire to
>>(there are 7 computers in my house and not one of them is Windoze.)
>>what was that anyway, jon?
>>On Thu, 11 Feb 1999 wobblyatcompcurr.com wrote:
>>->begin 644 Happy99.exe
>>Steev Hise, Wannabe Has-Been
>>steevathise.org http://www.cyborganic.com/people/steev
>>recycled art site: http://www.detritus.net
>>"A painter paints his picture on canvas. But musicians paint
>>their pictures on silence."
>> -Leopold Stokowski, reprimanding a talkative audience

Steev Hise, Automagickal Adept
steevathise.org http://www.cyborganic.com/people/steev recycled art site: http://www.detritus.net -----------------------------------------------------------------
"I'm 30 now, but I don't feel old in the slightest. I still do funny things with my hair, I still take drugs and fuck." - M. G. (full name withheld to protect the guilty)