Bugtraq mailing list archives

virus


From: erich () electrotek com (Erich W. Gunther)
Date: Thu, 20 Apr 1995 15:03:28 -0400


------ =_NextPart_000_01BA0F2F.E586B480
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

I received an e-mail from a collegue regarding a new virus propogated
by e-mail called the "Good Times" virus.  The e-mail was not very specific
as to the how the virus does its damage or what security holes it exploits
to do its thing.  Has anybody else heard of it and have any additional
information?  Here is a excerpt from the e-mail I received:

Luckily, there is one sure means of detecting what is now known as the "good
times" virus.  It always travels to new computers the same way in a text e-
mail message with the subject line reading simply "Good Times."

Avoiding infection is easy once the file has been recieved--not reading it.
The act of loading the file into the mail servers's ASCII buffer causes the
"Good Times" mainline program to initialize and execute.  The program is
highly intelligent-it will send copies of itself to everyone whose e-mail
address is contained in a received-mail file or sent-mail file.  If it can
find one.  It will then proceed to trash the computer it is running on.


Erich W. Gunther
Director of Technology Development
Electrotek Concepts, Inc.
erich () electrotek com

------ =_NextPart_000_01BA0F2F.E586B480
Content-Type: application/x-tnef
Content-Transfer-Encoding: base64
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------ =_NextPart_000_01BA0F2F.E586B480--



Current thread: