[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference powdml::pc_security

Title:PERSONAL COMPUTER SECURITY
Notice:SWEEP servers Note 5; more info on www-is-security.mso.dec.com
Moderator:BSS::BOREN
Created:Wed Jan 02 1991
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:504
Total number of notes:2905

494.0. ""Good-Times"-like Hoax?" by ASIC::HOWE (Computers just give you the answers. PP) Wed Apr 02 1997 14:31

    Another "Good Times"-like hoax?
    
Header Deleted:
    
    
Subject: FYI    Virus circulating in Mail 

Forwarded message:

Be aware that there are  letters going around 
that you have won free Aol until 1998....or  
AOL 4 free......  PLEASE DELETE...... contains a
virus that will *wipe out* your harddrive...... after you 
download and it executes.....

SUBJECT AREA OF EMAIL....... CONGRATULATIONS! You are a WINNER!

SUBJECT AREA OF EMAIL........AOL 4 Free - Get AOL For Free

senders.....Matthews27  or VPVVPPVVP  

Also, DO NOT open any e-mail from or with a re: aolhell97 
or VPdowinit. Opening this virus e-mail WILL *crash* 
your system! 

WARN  YOUR FRIENDS ,,,,,JUST DELETE ALL THE STUFF THAT HAS    
ANY OF THIS,,,,OK?,,,,,ITS HAPPENED TO 2 FRIENDS OF MINE!!!!!!!


...End forwarded message

    
T.RTitleUserPersonal
Name
DateLines
494.1"probable urban legend"BOOKIE::chayna.zko.dec.com::manana::eppesNina EppesMon Apr 14 1997 20:5331
I just got a variation of the warning in .0 from someone outside DEC:

>Have you heard about this?  Be careful! 
>
>
>Anyone who receives this must send it to as many people
>as you can.  It is essential that this problem be reconciled 
>as soon as possible.  A few hours ago, I opened an E-mail that 
>had the subject heading of "AOL4FREE.COM".  Within seconds of
>opening it, a window appeared and began to display my files that 
>were being deleted.  I immediately shut down my computer, but it 
>was too late.  This virus wiped me out.  It ate the Anti-Virus 
>software that comes with the Windows '95 program along with 
>F-Prot AVS.  Neither was able to detect it.  Please be careful and
>send this to as many people as possible, so maybe this new virus can 
>be eliminated.
>
>DON'T OPEN E_MAIL NOTING "AOL4FREE" 
>
>Be aware that there are letters going around that you have won free 
> AOL until 1998...or AOL 4 Free...Please Delete...contains a virus
>that will wipe out your harddrive .. after you download and it executes.... 
>it is too late.
>
>Please be very careful!!
>

The Computer Virus Myths Web site (http://www.kumite.com/myths/) labels
this as a "probable urban legend."

-- Nina
494.2is this 'penpal virus' mail also a hoax?JGODCL::BLOEMENDALWim, JGO B-1/06, 889-9364Wed Apr 16 1997 07:3839
What about this mail I received from within DEC, sounds like hoax as well??

  _Wim_

        FYI... this message circulated here.  Want you all to know about this.
Please pass on..

> VIRUS WARNING   DO  NOT OPEN  IT  !  

If anyone receives mail entitled:  PENPAL GREETINGS!  
Delete   it    WITHOUT    reading    it.
 
  > ON NO ACCOUNT BE TEMPTED TO OPEN AND READ THE MESSAGE. 

  > This is a warning for all Internet users.  There is a dangerous  virus 
     propagating across the Internet through an e-mail message entitled 
 
  > 'PENPAL GREETINGS!'.  DO NOT OPEN ANY MESSAGE ENTITLED 
     "PENPAL GREETINGS!"  The message appears to be a friendly letter 
      asking you  if  you are interested in a penpal, but by the time you open
      it to read it, it is too late.  The 'trojan horse' virus will have
already infected 
      the boot sector of your hard drive, destroying all of the data present. 
      It is a self-propagating virus, and once the message is read, it will 
      AUTOMATICALLY forward itself to anyone whose e-mail address is 
     present in YOUR mailbox.  This virus will destroy your hard drive, and 
     holds  the potential to destroy the hard drive of anyone whose mail is in 
     your in-box, and whose mail is in their in-box and so on.  If this virus 
     keeps getting passed, it has the potential to do a great deal of damage 
     to computer networks worldwide.

    Please, delete the message entitled "PENPAL GREETINGS!" as soon as 
    you  see it.  And pass this message along to all of your friends, 






494.3SMURF::PBECKWho put the bop in the hale-de-bop-de-bop?Wed Apr 16 1997 21:409
    re .1
    
    Symantec's AntiVirus Research Center website lists AOL4FREE as a
    hoax. (Think of it as a real virus of a different sort -- the virus
    is the propagation of the warning.)
    
    PenPal greetings is also listed as a hoax.
    
    See http://www.symantec.com/avcenter/hoax.html
494.4Apparently there really is an AOL4FREE.COM trojan horseSMURF::PBECKWho put the bop in the hale-de-bop-de-bop?Fri Apr 18 1997 23:118
    On the other hand ...
    
    http://ciac.llnl.gov/ciac/bulletins/h-47a.shtml
    
    indicates that there really is a trojan horse version of aol4free
    out there -- not a good times style "read this mail and you're
    hosed" type of thing, but an actual exe that can do damaged if
    executed.
494.5True... and FalseVARDAF::BERBIGIERNo known policy forbids common senseTue Apr 22 1997 12:2116
1/ You CANNOT get infected just by reading a mail
   AOL4FREE is a hoax
   To be effective a malware (Trojan Horse or Virus) must be activated!

2/ You can get infected by double clicking on an attachment within a mail
   (Word and Excel Macro Viruses, binary files...)
   AOL4FREE.COM is a real destructive trojan horse

Keep in mind that in doubt you must first check
http://www-is-security.mso.dec.com/ and click on the link
	Computer Virus Hoax List

to be certain to use latest up-to-date information, and not 
cached information, use "Reload"

Pierre