P3D happy99

[wier@xxxxxxxxxxxxxxxxx]

Ok - more info. The happy99 worm was contained in the following
message...

>Date: Sat, 20 Feb 1999 22:43:15 -0800
>From: "Mark & Marian Blum" <markb@xxxxxxxxxxxx>
>Cc: "Photo 3-d" <photo-3d@xxxxxxxxxxxxxxxxx>
>Subject: P3D Brackets for twin rigs
>Message-ID: <199902210643.WAA19029@xxxxxxxxxxxxxxxxx>

begin 644   Happy99.exe

etc etc etc

which went out as Digest #3205. 

I've expunged it from all the archives and copies here, so if you
want a clean version of 3205, drop me a note at the address below.

IMPORTANT: Don't everybody jump on Mark - this is a "silent" worm -
it can be passed along without your knowledge once you have it. It's
designed to specifically look like a "fireworks" screen saver so you may
well not notice it.

I have now installed a block which should divert off any future arrivals
of mail with the worm present (I hope!), and will prevent it from
being being sent back out to the list.

For more information on how to deal with the Happy99, take a look at

http://www.symantec.com/avcenter/venc/data/happy99.worm.html

Thanks!

--Bob Wier

wier@xxxxxxxxxxxxxxxxx


------------------------------