SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Dream Machine ( Build your own PC ) -- Ignore unavailable to you. Want to Upgrade?


To: Spots who wrote (7868)6/10/1999 11:12:00 PM
From: TraderAlan  Read Replies (1) | Respond to of 14778
 
Watch out. The nasties are are it again:

ExploreZip Virus Hits Computers Around The World
By Dick Satran

SAN FRANCISCO (Reuters) - A new email-borne computer infection swept the Internet Thursday, showing up quickly in thousands of computers around the world and leading to the shutdown of some corporate e-mail systems.

The new infection, ''called the ExploreZip worm,'' can erase files from a users' computers, making it inherently more dangerous than the Melissa virus, which gained notoriety for its ability to spread quickly but not because it destroyed any data.

ExploreZip is known as a worm, not a virus, because it can't replicate itself. Computer viruses such as Melissa, which appeared in March, are written with the capability to reproduce through automation.

But even if it can't reproduce itself, it's spreading its destructive force quickly, experts said. Computers in the U.S., Germany, France, Norway, Israel and the Czech Republic were invaded, said Finnish computer security firm Data Fellows Corp.

Network Associates Inc. (Nasdaq:NETA - news), the computer security firm, said it gave ExploreZip a ''high risk'' classification because the number of incidents doubled overnight and it has already shown up on thousands of computers. The company said it believes the worm originated in Israel.

The Melissa virus gained notoriety because it was the fastest-moving virus ever seen, and another recent virus, the CIH, or ''Chernobyl'' virus, in April, caused severe damage to a relatively small number of computers. ''This worm combines the speed of Melissa with the destructive payload of the CIH virus,'' said Wes Wasson, director of anti-virus products at Network Associates.

The computer bug is cleverly disguised as an e-mail that appears to be a response to an earlier message, borrowing a page from Melissa, which appeared as a benign e-mail and surreptitiously sent messages to other users.

''I received your e-mail, and I shall reply ASAP,'' the ExploreZip message reads. ''Till then, take a look at the zipped docs.''

The computer experts warned users to delete that message. Users who respond by clicking on the attached file will launch the virus into their computer that will then destroy Microsoft Outlook, Express and possibly other e-mail related documents.

Leading computer security companies Network Associates (http://www.nai.com), Symantec Corp. (Nasdaq:SYMC - news) (http://symantec.com) and Trend Micro Inc. (http://www.antivirus.com) all have offered virus protection patches that can be downloaded from their sites to identify and eliminate the bug.

''Apart from the using the anti-virus software, we just recommend that people not open any file that they can't verify the origin of,'' said a Network Associates official.

The Washington lobbying office of one major U.S. corporation was hit Thursday, receiving e-mail with the virus that appeared to be from company officials in other offices. One recipient, unaware of the malicious nature of the e-mail attachment, ran the program and lost numerous files.

''I think that anyone who randomly wipes out people's files is totally obnoxious,'' the person, who asked to remain anonymous, said.

At Wall Street brokerage giant Merrill Lynch, the e-mail system was shut down to protect data after the worm was found on a computer. ''We learned our lesson with Melissa that you have to work quickly to avoid problems,'' said a spokeswoman.

Computers at dozens of other companies were reported hit, and Network Associates said ''consumers at home will be affected as well.''




To: Spots who wrote (7868)6/14/1999 10:32:00 PM
From: Clarence Dodge  Read Replies (3) | Respond to of 14778
 
Hi Spots

Re: Win98 DOS Boot w/cd access disk revisited...

Are you up for this? <g>

The Plextor CDRW I bought has an app with it called CD Res-Q..it creates a bootable image of a hdd or partition on CD. CD Res-Q requires use of the DOS Boot w/CD access disk,which, I believe it also copies to the CD,and which you walked me thru a while back. I'm temporarily keeping my IDE CD-rom in the machine as well and am having some difficulty getting both the IDE cd-rom and the Plextor CDRW to be properly accessed by the DOS Boot Disk.

The Plextor CDRW itself is working properly in all respects as is the IDE cd-rom. Both are recognized in all OS s. I am confident the Plextor is installed ok and is getting along with my on-board Adaptec SCSI chip. I just need to tweak the files on the DOS Boot floppy.

Here is the problem..

In win98 my Ide cd-rom is recognized as Z: and the Plextor as I:. The problem is when booted from the DOS floppy, I:\> DIR shows the contents of the IDE cd-rom Z: instead of I: the Plextor.. And the Z:\ prompt just gives Invalid Drive Specification. This is what I need to first straighten out in order to proceed.

Here are the particulars...

I added the Plextor driver (plextor.sys) to A:\CDs directory on the boot floppy. Actually I also have it in A:\ and need to delete it from there but don't know the delete command? Tried 'delete' of course, no go.<g>. I also have ASPI8DOS.SYS in A:\. This is the driver manager, right? I've tried to follow along with Plextors instructions but sometimes have to just do things as instructed without knowing what some of the files are..I know thats bad but hey...I gota learn somehow..

This is the A:\ config.sys file:

Device= A:\CDs\taisatap.sys/ D:MSCD0001

(I added the following)

Device= A:\ASPI8DOS.SYS
Device= A:\CDs\Plextor.sys/ D:Plex0001

And this is the A:\ Autoexec.bat file:

MSCDEX.EXE/ D:MSCD0001 /v

(I added)
MSCDEX.EXE/ D:Plex0001 /v

I'm not at all confident about the lines I added to config.sys and autoexec.bat. I'm almost sure this is where I: and Z: are not being recognized properly by the floppy.

Can you tell me where I botched up and what the correct config for the DOS Boot floppy should be for it to recognize both scsi cdrw and ide cdrom as they are lettered in w98?

If you choose to accept this mission..don't worry about a timely response... I know you're a busy man these days and I owe you a world of gratitude already, so there's no hurry here..

Clarence