We were lucky - we only had 3 employees that got infected
and no-one rebooted after being infected. The virus renames
all the *.zip, *.mp3, and *.jpg files. These files get deleted if
the user reboots. If the user doesn't reboot, the script can be
modified to reverse the renaming.
James wrote:
> ----- Original Message -----
> > Michael Yanowitz wrote:
> > >
> > > Our company was infected by the CREATIVE virus:
> > > http://www.F-secure.com/v-descs/creative.shtml
> > > which converts ZIP, MP3, and JPG files to LINUX.
> > >
> > > It comes in a message that looks like:
> > > Subject: A great Shockwave flash movie
> > > Body: Check out this new flash movie that I downloaded just now
> > > ... It's Great
> > >
> > > Bye
> > >
> > > Attachment: CREATIVE.EXE
> > >
> > > It also writes the following message:
>
> (snip)
>
> From: "Michael R. Jinks" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, January 03, 2001 1:36 PM
> Subject: Re: Off-Topic: Infected by CREATIVE Virus (Beware of the Penguins):
>
> > Forgive my crudeness, but what a prick.
> >
> > To anybody who might be considering a similar scheme:
> >
> > This is NOT effective Linux advocacy. Yes Windows sucks. Yes it is
> (snip)
>
> I don't really think anyone would change their opinion of Linux based on
> this experience. They'd probably just form an opinion of the virus author
> like Michael.
>
> I guess I'm more curious as to what happened to the employee/employees who
> went ahead and ran the executable. Letters in their personnel file? Bills
> for the time spent by IT fixing the problem? Whipped with a wet noodle?
>
> Cheers,
>
> James
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
