From llilient@wiley.csusb.edu Wed Dec 7 18:18 PST 1994 Return-Path: Received: from blaze.csci.csusb.edu by silicon.csci.csusb.edu (5.0/SMI-SVR4) id AA05747; Wed, 7 Dec 94 18:18:09 PST Received: from acme.csusb.edu by blaze.csci.csusb.edu (AIX 3.2/UCB 5.64/4.03) id AA05767; Wed, 7 Dec 1994 18:11:19 -0800 Received: (from daemon@localhost) by acme.csusb.edu (8.6.9/8.6.9) id SAA05118 for faculty-senate-outgoing; Wed, 7 Dec 1994 18:08:24 -0800 From: jking@wiley.csusb.edu (Jeanne King) Message-Id: <199412080215.AA17019@wiley.csusb.edu> Subject: virus (fwd) ... from a Guru of the internet To: faculty-senate@acme.csusb.edu Date: Wed, 7 Dec 1994 18:15:03 -0800 (PST) Cc: jchaney@wiley.csusb.edu (John Chaney) X-Mailer: ELM [version 2.4 PL22] Sender: faculty-senate-owner@acme.csusb.edu Precedence: bulk Content-Type: text Content-Length: 5413 Status: R Forwarded message: > From KING@CCVAX.FULLERTON.EDU Wed Dec 7 18:13:23 1994 > Date: Wed, 07 Dec 1994 18:03:23 -0800 (PST) > From: Jeanne King > Subject: virus > To: jking@wiley.csusb.edu > Message-Id: <01HKDDAV21N6009W3E@FULLERTON.EDU> > X-Vms-To: @JK > X-Vms-Cc: KING > Mime-Version: 1.0 > Content-Transfer-Encoding: 7BIT > > From: IN%"PCRISPE1@UA1VM.UA.EDU" "Patrick Douglas Crispen" 7-DEC-1994 13:40:26.04 > To: IN%"ROADMAP@UA1VM.UA.EDU" "Multiple recipients of list ROADMAP" > CC: > Subj: MAP-EXTRA: INTERNET MAIL "VIRUS" A HOAX - OFFICIAL WORD > > Return-path: > Received: from UA1VM.UA.EDU by FULLERTON.EDU (PMDF V4.3-7 #4956) > id <01HKD4367S5S009O7Y@FULLERTON.EDU>; Wed, 7 Dec 1994 13:39:19 PST > Received: from UA1VM.UA.EDU by UA1VM.UA.EDU (IBM VM SMTP V2R2) > with BSMTP id 8384; Wed, 07 Dec 94 15:40:50 CST > Received: from UA1VM.UA.EDU (NJE origin LISTSERV@UA1VM) > by UA1VM.UA.EDU (LMail V1.2a/1.8a) with BSMTP id 4012; Wed, > 7 Dec 1994 15:40:45 -0600 > Date: Wed, 07 Dec 1994 15:32:54 -0600 (CST) > From: Patrick Douglas Crispen > Subject: MAP-EXTRA: INTERNET MAIL "VIRUS" A HOAX - OFFICIAL WORD > Sender: ROADMAP FOR THE INFORMATION SUPERHIGHWAY SUBSCRIPTION LIST > > To: Multiple recipients of list ROADMAP > Message-id: <01HKD438IAUA009O7Y@FULLERTON.EDU> > Content-transfer-encoding: 7BIT > Comments: Resent-From: Patrick Douglas Crispen > > Hi kids: > > I know that I have been stuffing your mailbox with a whole bunch of mail > recently, but I thought that the following may be of some interest to you > -- I know it gave me a good laugh :) > > It seems that the latest Urban Legend floating around the Internet is that > there is a virus called "Good Times" that is transmitted via e-mail and eats > hard drives. <> > > Anyway, here is the *TRUTH* about the Good Times virus in case one of your > friends tries to spam you with warnings about it: > > > ------------------- A - T - T - E - N - T - I - O - N ------------------- > > THE "Good Times" VIRUS IS AN URBAN LEGEND > > In the early part of December, CIAC started to receive information requests > about a supposed "virus" which could be contracted via America OnLine, simply > by reading a message. The following is the message that CIAC received: > > --------------------------------------------------------------------------- > | Here is some important information. Beware of a file called Goodtimes. | > | | > | Happy Chanukah everyone, and be careful out there. There is a virus on | > | America Online being sent by E-Mail. If you get anything called "Good | > | Times", DON'T read it or download it. It is a virus that will erase your | > | hard drive. Forward this to all your friends. It may help them a lot. | > --------------------------------------------------------------------------- > > THIS IS A HOAX. Upon investigation, CIAC has determined that this message > originated from both a user of America Online and a student at a university > at approximately the same time, and it was meant to be a hoax. > > CIAC has also seen other variations of this hoax, the main one is that any > electronic mail message with the subject line of "xxx-1" will infect your > computer. > > This rumor has been spreading very widely. This spread is due mainly to the > fact that many people have seen a message with "Good Times" in the header. > > They delete the message without reading it, thus believing that they have > saved themselves from being attacked. These first-hand reports give a false > sense of credibility to the alert message. > > There has been one confirmation of a person who received a message with > "xxx-1" in the header, but an empty message body. Then, (in a panic, because > he had heard the alert), he checked his PC for viruses (the first time he > checked his machine in months) and found a pre-existing virus on his machine. > He incorrectly came to the conclusion that the E-mail message gave him the > virus (this particular virus could NOT POSSIBLY have spread via an E-mail > message). This person then spread his alert. > > As of this date, there are no known viruses which can infect merely through > reading a mail message. For a virus to spread some program must be executed. > Reading a mail message does not execute the mail message. Yes, Trojans have > been found as executable attachments to mail messages, the most notorious > being the IBM VM Christmas Card Trojan of 1987, also the TERM MODULE Worm > (reference CIAC Bulletin B-7) and the GAME2 MODULE Worm (CIAC Bulletin B-12). > But this is not the case for this particular "virus" alert. > > If you encounter this message being distributed on any mailing lists, simply > ignore it or send a follow-up message stating that this is a false rumor. > > Karyn Pichnarczyk > CIAC Team > ciac@llnl.gov > > (\__/) .~ ~. )) > /O O `./ .' PATRICK DOUGLAS CRISPEN > {O__, \ { PCRISPE1@UA1VM.UA.EDU > / . . ) \ THE UNIVERSITY OF ALABAMA > |-| '-' \ } )) > .( _( )_.' Roadmap: Copyright 1994 Patrick Crispen. > '---.~_ _ _& All rights reserved. >