FW: new virus -Forwarded Elizabeth A. Mazzella 20 Apr 1995 12:08 EST

I am forwarding this message to all RESADM-L users.  I received it
from TECHNO-L. For those of you on both lists, I apologize for th e
duplication.
* Elizabeth (Liz) Mazzella             xxxxxx@ALBNYDH2.BITNET  *
* Director, Technology Transfer & Contract Programs           *
* Health Research, Inc. (A Non-Profit Corp.) Albany NY 12209  *
* Voice: (518) 431-1200                    Fax: (518)431-1234 *
*** Forwarding note from .       --.        04/20/95 12:48 ***
Received: from CNSIBM.ALBANY.EDU by ALBNYDH2 (Mailer R2.10 ptf000) with BSMTP
 id 7446; Thu, 20 Apr 95 12:48:11 EDT
Received: from ALBNYVM1 (NJE origin xxxxxx@ALBNYVM1) by CNSIBM.ALBANY.EDU (LMail
 V1.2a/1.8a) with BSMTP id 4693; Thu, 20 Apr 1995 12:47:05 -0400
Received: from sparkyfs.erg.sri.com by UACSC2.ALBANY.EDU (IBM VM SMTP V2R2)
 with TCP; Thu, 20 Apr 95 12:46:56 EDT
Received: by sparkyfs.erg.sri.com (5.65/2.7davy)
 id AA17507; Thu, 20 Apr 95 08:01:03 -0700
Received: from [165.112.208.3] by sparkyfs.erg.sri.com (5.65/2.7davy)
 id AA17500; Thu, 20 Apr 95 08:01:00 -0700
Received: from SMTP2.mm.hub.nih.gov by web.nih.gov (8.6.10/1.35(nsb-1.0))
 id LAA01810; Thu, 20 Apr 1995 11:00:48 -0400
Received: by SMTP2.mm.hub.nih.gov with Microsoft Mail
 id <xxxxxx@SMTP2.mm.hub.nih.gov>; Thu, 20 Apr 95 11:00:47 edt
From: "Preston, David" <xxxxxx@otd.nci.nih.gov>
To: Biz-biotech <xxxxxx@netcom.com>, int-prop <xxxxxx@gmu.edu>,
 techno-I <xxxxxx@erg.sri.com>, toohey <xxxxxx@finnegan.com>
Subject: FW: new virus -Forwarded
Date: Thu, 20 Apr 95 10:59:00 edt
Message-Id: <xxxxxx@SMTP2.mm.hub.nih.gov>
Encoding: 111 TEXT
X-Mailer: Microsoft Mail V3.0
Sender: xxxxxx@erg.sri.com

 ----------
From: Mays, Tom
To: Administrator NCI/OTD; Aut, Larry; Beccles, Angela; Christini, Michael;
Cotreau, Bill; Covington, Rita; Crits, Adam; Cubert, Jeremy; Cuchural, Gary;
Lovoy, Elizabeth; Lukacs, Frank; Marquis, Steve; Maurey, Karen; Mays, Tom;
Mazan, Kate; Noel, Mark; OTD Receptionist; Paul-Carre, Larissa; Preston,
David; Rhyu, Michelle; Scherb, Esther; Sybert, Kathy; Tsui, Amy; Zbar, Bert;
Bialozor, Donna; Fuchs, Cindy
Subject: FW: new virus -Forwarded
Date: Thursday, April 20, 1995 8:08AM

FYI.
 ----------
From: CSECUR-L%NIHLIST.BITNET
To: Multiple recipients of list CSECUR-L
Subject: FW: new virus -Forwarded
Date: Tuesday, April 18, 1995 8:19PM

I received the virus alert below from Dee DeZafra, PHS Information Systems
Security Officer.  She got it from the IRM College.

Please disseminate the information appropriately within your organizations.

Thanks,

Jaren Doherty
Office of Information Resources Management
Phone: (301) 402-4445
Internet:  xxxxxx@nih.gov

 -------------------------- [Original Message] -------------------------
** High Priority **

Please read this message.
 Date:  04/13/1995  02:25 pm  (Thursday)
 From:  Bryce Timberlake
 To:  ASY-TIS.TIS Staff
 Subject:  new virus

** High Priority **

PLEASE READ THIS CAREFULLY!

The following notice came across my internet connect this
morning and will be released by DOE-HQ today,
although it may be too late in some cases.

"There is a new computer virus that is being sent across
the Internet.  If you receive an email message with the
subject line "Good Times," DO NOT read the message.
DELETE it immediately.  Please read the messages
below.

Some miscreant is sending email under the title "good
times" nation-wide.  If you get anything like this, DON'T
DOWNLOAD THE FILE!  It has a virus that rewrites
your hard drive, obliterating anything on it.  Please be
careful and forward this mail to anyone you care about.

Thought you might like to know...

The FCC released a warning last Wednesday concerning
a matter of major importance to any regular user of the
Internet.  Apparently, a new computer virus has been
engineered by a user of America Online that is unparalled
in its destructive capability.  Other, more well-known
viruses such as Stoned, Airwolf, and Michaelangelo pale
in comparison to the prospects of this newest creation by
a warped mentality.

What makes this virus so terrifying, said the FCC, is the
fact that no program needs to be exchanged for a new
computer to be infected.  It can be spread through the
existing e-mail systems of the InterNet. Once a computer
is infected, one of several things can happen.  If the
computer contains a hard drive, that will most likely be
destroyed.  If the program is not stopped, the computer's
processor will be placed in an nth-complexity infinite
binary loop, which can severely damage the processor if
left running that way too long.  Unfortunately, most novice
computer users will not realize what is happening until it is
far too late.

Luckily, there is one sure means of detecting what is now
known as the "Good Times" virus.  It always travels to
new computers the same way in a test e-mail message
with the subject line reading simply "Good Times."

Avoiding infection is easy once the file has been received
 - not reading it.
The act of loading the file into the mail server's ASCII
buffer causes the "Good Times" mainline program to
initialize and execute.  The program is highly intelligent - it
will send copies of itself to everyone whose e-mail
address is contained in a received-mail file or a sent-mail
file, if it can find one.  It will then trash the computer it is
running on.

The bottom line here is - if you receive a file with the
subject line "Good Times," delete it immediately!  Do not
read it!  Rest assured that whoever's name was on the
"From:" line was surely struck by the virus.

Warn your friends and local system users of this newest
threat to the InterNet!  It could save them a lot of time
and money."

Please pass this on...especially to anyone you know that
uses "America Online" regularly.