[Mac-NT] URGENT: Happy99.exe virus *variant* on the loose on our list

Daniel L. Schwartz(expresso[at]snip.net)
Thu, 23 Dec 1999 10:50:05 -0500

        Good morning!

        I just received a call from Mike Leone about messages we both received
from various "individuals" with [Mac-NT] in the subject line, with an
attached 69 kilobyte file **with random names.*** My particular copy came
from a "Jeff Cressler" while Mike's came from someone else... And
himself!

        This appears to be a spammer variant with hijacked email addresses and
SMTP (IMAP) IP addresses.

        The file is about 69,632 bytes (+/- for name variations); and is a
"Happy99" variant... Someone on the Mac-NT list - Who probably is
receiving messages in individual mode (as opposed to DIGEST) has an
infected machine... Update your antivirus software!

        Here is the text of the message:

 -----

<center><bold><italic><underline><color><param>0000,0000,fefe</param><bigger><bigger><bigger><bigger>http://stuart.messagemates.com/index.html

</bigger></bigger></bigger></bigger></color></underline></italic></bold>
  

<center><color><param>ffff,0000,0000</param>Hypercool Happy New Year 2000
funny programs and animations...

We attached our recent animation from this site in our mail ! Check it
out !

</color></center>

 -----

        Do *NOT* open the attached .EXE file!

        Yours truly,

        Daniel L. Schwartz,

        Electrical Engineer.

        Dan's MacOS Consulting

        239 Great Road

        Maple Shade, NJ 08052-3044

        Voice: 856-642-7666 <<-- Note new area code (was 609)

        Fax: 413-451-4391

 -----------------------------------------------------------------

        THERE ARE NO ATTACHMENTS TO THIS MESSAGE, SO IF ONE

     APPEARS WITH IT, DO NOT OPEN OR DOWNLOAD IT!

        <<mailto:expresso@snip.net>

         

        ALTERNATE: <<mailto:expresso@workmail.com>

                Webmaster for <<http://www.Faulknerstudios.com>,

                                        <<http://www.BrakeAndGo.com>

                **Your UltraBac Solution Source**

-> NEW! Sign up for the Mac-NT Mailing list at:

 <<http://www.onelist.com/subscribe/Mac-NT>

 -----------------------------------------------------------------

--------------------------- ONElist Sponsor ----------------------------

Independent contractors: Find your next project gig through JobSwarm!
        You can even make $$$ by referring friends.
<a href=" http://clickme.onelist.com/ad/jobswarm2 ">Click Here</a>

------------------------------------------------------------------------

This archive was generated by hypermail 2.0b2 on Thu Dec 23 1999 - 08:00:24 PST