Re: Another new worm???

[mshines () PURDUE EDU (Michael S Hines)]

Since the time that the MS$Windows registry says to suppress any and all
extensions of .SHS - so a file names vba_stages.a.txt.shs appears to the
user as vba_stages.a.txt - surely a safe file to open..

A sure way to get the 'Stages of Life' virus - been there, done that!   Not
funny - had to relaod system.

Supposedly system was protected with Dr. Solomons Anti-Virus running.  Also
Network Associates Virusscan did not see it.  Ontrack Fix-IT did find it.
By the time we found it the system was corrupted.  The 'fix' from Network
Associates website did not work on NT4SP6.

----------------------------------------------------------------------
Michael S Hines, CISA,CIA,CFE,CDP         | Phone 765.494.5338
Coordinator of Data Systems / Programming | fax   765.496.1466
Schools of Engineering                    | e-mail: mshines () purdue edu
1280 Engineering Administration           |
West Lafayette, IN  47907-1280            |
----------------------------------------------------------------------

-----Original Message-----
From: VULN-DEV List [mailto:    VULN-DEV () SECURITYFOCUS COM]On Behalf Of
Justin Lintz
Sent: Thursday, June 22, 2000 12:54 AM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Re: Another new worm???

About those pws coming in .txt files.  Since when could a virus come from a
txt file unless it was a .doc with a embedded macro in it.