RE: virus

[erich () electrotek com (Erich W. Gunther)]

------ =_NextPart_000_01BA119A.12F08BA0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

After learning that the virus was a hoax, I tried to reply to those who informed me
on an individual basis so as not to tie up this list, but due to the large number of
continuing replies, I must reply here also.

Thanks for the information to all who replied and for the restraint shown in your
messages.  I am suitably humbled for getting burned by this one.  I don't know
how I missed it.  My collegues have been suitably informed as well.

Erich W. Gunther

----------
From:   Erich W. Gunther
Sent:   Thursday, April 20, 1995 3:03 PM
To:     bugtraq () fc net
Subject:        virus

I received an e-mail from a collegue regarding a new virus propogated
by e-mail called the "Good Times" virus.  The e-mail was not very specific
as to the how the virus does its damage or what security holes it exploits
to do its thing.  Has anybody else heard of it and have any additional
information?  Here is a excerpt from the e-mail I received:

> Luckily, there is one sure means of detecting what is now known as the "good
> times" virus.  It always travels to new computers the same way in a text e-
> mail message with the subject line reading simply "Good Times."
>
> Avoiding infection is easy once the file has been recieved--not reading it.
> The act of loading the file into the mail servers's ASCII buffer causes the
> "Good Times" mainline program to initialize and execute.  The program is
> highly intelligent-it will send copies of itself to everyone whose e-mail
> address is contained in a received-mail file or sent-mail file.  If it can
> find one.  It will then proceed to trash the computer it is running on.


Erich W. Gunther
Director of Technology Development
Electrotek Concepts, Inc.
erich () electrotek com

------ =_NextPart_000_01BA119A.12F08BA0
Content-Type: application/x-tnef
Content-Transfer-Encoding: base64

eJ8+IiIUAQaQCAAEAAAAAAABAAEAAQeQBgAIAAAA5AQAAAAAAADoAAENgAQAAgAAAAIAAgABBJAG
APwAAAABAAAADAAAAAMAADACAAAACwAPDgAAAAACAf8PAQAAADsAAAAAAAAAgSsfpL6jEBmdbgDd
AQ9UAgAAAABidWd0cmFxQGZjLm5ldABTTVRQAGJ1Z3RyYXFAZmMubmV0AAAeAAIwAQAAAAUAAABT
TVRQAAAAAB4AAzABAAAADwAAAGJ1Z3RyYXFAZmMubmV0AAADABUMAQAAAAMA/g8GAAAAHgABMAEA
AAAPAAAAYnVndHJhcUBmYy5uZXQAAAIBCzABAAAAFAAAAFNNVFA6QlVHVFJBUUBGQy5ORVQAAwAA
OQAAAAALAEA6AQAAAAIB9g8BAAAABAAAAAIAAAA9KQEIgAcAGAAAAElQTS5NaWNyb3NvZnQgTWFp
bC5Ob3RlADEIAQSAAQAKAAAAUkU6IHZpcnVzACoDAQWAAwAOAAAAywcEABcAEAAwACAAAABNAQEg
gAMADgAAAMsHBAAXABAAKgAdAAAARAEBCYABACEAAABCN0E2NzdCNEY0N0JDRTExOTlGODQ0NDU1
MzU0MDAwMAADBwEDkAYAFAcAABIAAAALACMAAAAAAAMAJgAAAAAACwApAAAAAAADADYAAAAAAEAA
OQBAR4mYuxG6AR4AcAABAAAABgAAAHZpcnVzAAAAAgFxAAEAAAAbAAAAAboPUWvOXgdYrnshEc6Z
+ERFU1QAAACaVTDCAB4AHgwBAAAAAwAAAE1TAAAeAB8MAQAAABYAAABFTEVDVFJPVEVLL01BSU4v
RVJJQ0gAAAADAAYQ0Zp4GwMABxBKBQAAHgAIEAEAAABlAAAAQUZURVJMRUFSTklOR1RIQVRUSEVW
SVJVU1dBU0FIT0FYLElUUklFRFRPUkVQTFlUT1RIT1NFV0hPSU5GT1JNRURNRU9OQU5JTkRJVklE
VUFMQkFTSVNTT0FTTk9UVE9USUVVUAAAAAACAQkQAQAAAKUFAAChBQAA4gkAAExaRnU7/3kmnwAK
AQ8CFQKnAgBjaArA8HNldDEF3AKDAFAPjVsGtAKDMgPFD8cwEpFz6HRlbQKDMw98FGAQfS59CoAI
zwnZOxgCMjW+NRhcFzEK+xUxC/JjAECMIEEBgASQIGxlCsDhAwBuZyB0D/AFQB0gQGUgdmlydQQg
dwJhBCBhIGhvYXhYLCBJHRAIgWQdEG+2IBgQC1B5H0IdIG8QINseAB5wIAuAAhByB4AfMD8HgAqF
AiAeQAOgC4BkackdsGR1B0AgYh4gBADMIHMfYB4hbm8dUR/xsQiQIHVwHREjEWwEAPJ0HrBidQVA
IpAdkB/jkx2QC2ByZx2QbnUG0HkcYW9mCoUFoAIwC4B11xziH4IIkHMesm0d4AVArx+EHYAYEB5A
bCNALgqF5QqFVA/wbmsEICDRHWP7ILQdQGkh0R9RB0ADICByfyg0HzAAcB8wK4YYEBSgcisLcQVA
cx5wdyISIHknCGEKhQeBc2EmUHMu8iAewWFtIzAn4AGRKWL/JpEckC4UJlACQBziJTAEoF0fIWIf
wSSSAiBlMRNk1QIgJwVAayOgdwqFL2HfKLIEAR8hMbAxEU0fwBeB3RyQZwpQBCAP8HYdkCawzwnw
MYggtx4hd2UtACotJkUFEA/gIFcxEEd1nwIwKZEqPAr0JNAzNg3wuRsZMTYKoANgFLBjBUBGLT73
PG0xODAC0WnwLTE0NA3wDNBBAz2c6wwwPnZGA2E6CuE9rz6y/wyCOu8Kh0HfPpQGYAIwQ4+HRJsr
EAhwc2RheR6wHkE+cAMRAdAesDE5OQA1IDM6MDMgUOZNRm9CXVRvSK9EmyUwUmcu4XFAD9AuM5B0
40yPR351Ymo+sU6vRJt/HbM7/z0PC9Q+dh7QGBBjxmUiYC3DIGUtAMADEe8DUh5BNzYfcWcLERzi
HlDPM5AH4B20PnFwb1twFLDuZAqFM9FZ5WMs8R8iHYG4IkdvBHArAAdyIh2kfzERKxAdkFnlHhIj
ojfwcvkfwHNwBZAGkEWACoUeIf8ltTXiHXg00AeRMbBkMTFgvzDRIcAFwCBwHUEQIGMIcV50KXEG
8GRzWdB4C1Bv/2ShCoUfUTTQZJMkgRzwMRHSSB4ibnkG4GRd0Snw/2NRHKEfMCbwZrIt8jfTaUF9
HkBkIlAscgdACoUsCT+/aOEpoiMRHlBm8FlAcgUxL1pTHXJZ5VkIOio8PiDwTHVjawMQSvE7sm3D
/zRRMYEpsQeABiJqcQ2wPqL/HOJlgyMRNUE1IyHhaGJe8V5nXzFw1yQQX5tJarFs/x4QFJAe4Tfh
KfAfQlwSBaD8bXAlQASQdXQwwAeAHgH3OOIeQRSweGbRP4ZxQFoD/zCVHgAxsEWgedNTdCTBcpF/
GBBroBziAJB5UB+xXxku5iJw1nDXQXZnMFujILHvc9Ih0SMRHKBzH8ACIFlA/x1jQNAckDfBBCA4
I1khCJD/WXE+8COifiY2sXDXYGIA0P8FQGpxF6B+RIL3LxElxFoDJRAgcmGRcycEIEFT/ENJHtAl
MA3QHGFeYB3g3weRHXFw118bWgFufdM+cT8JwDFhH1ELgGvRB0Bpev9rQh8wZvBl4RSwYDWM1gQA
83DXJJBnaDjTFLAtAJCQ/UhxLWbBA/AtARAgLgEFoO5wKHFqZBAgbGqAH1GEUf9hsHKCIHEgQVnk
cNdroS6x/2SBBCAnggtxNoJ6slkmWfX/g0IFsZIxkZCX1zESaoNeYP5ucNdA0C4BNFWRxR1xA6D/
PnFZQB8kLuEvUB1jeTZmsvsjER3QbhzTAiAqLTqPO5teRB3APrEFsWpxVAWQaGsjoBegZx/ARIRR
F6BwPweAAjCgJhyQPsA+gmsg/whQgrEFMCiSgrAqJgZxD+D2QDnQpLYueTFWf1ePPoULCoUXMQCr
EAAAAAMAEBAAAAAAAwAREAAAAABAAAcwAJWQwLoRugFAAAgwAJWQwLoRugEeAD0AAQAAAAUAAABS
RTogAAAAAKg/

------ =_NextPart_000_01BA119A.12F08BA0--