Path: utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!samsung!brutus.cs.uiuc.edu!wuarchive!uwm.edu!ux1.cso.uiuc.edu!tank!eecae!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw
From: GATEH@CONNCOLL.BITNET
Newsgroups: comp.virus
Subject: More on the DIR.EXEC problem
Message-ID: <0008.8911281214.AA07608@ge.sei.cmu.edu>
Date: 27 Nov 89 21:47:00 GMT
Sender: Virus Discussion List <VIRUS-L@IBM1.CC.Lehigh.EDU>
Lines: 25
Approved: krvw@sei.cmu.edu

Apologies if this info on DIR.EXEC has already been posted (I hadn't seen
it before, though).

- --- Forwarded mail from Joachim Lohoff-Werner <C0030006@DBSTU1>

>From GAMES-L@BROWNVM.BITNET Mon Nov 27 16:08:24 1989
Sender: Computer Games List <GAMES-L@BROWNVM>
From: Joachim Lohoff-Werner <C0030006@DBSTU1.BITNET>

Hello *.*,

I have also received DIR EXEC and looked into it. After reading the
NAMES and NETLOG files and shipping multiple copies to the people listed
in these files it does something very bad:

The DIR EXEC asks for the system date (QUERY TIME) and erases all files
if the system date is greater then 89, i.e. next year.

Please discard all copies of DIR EXEC in your system RDR queue.

Kind regards, amicales salutations, cordiali saluti, shalom u'bracha,
freundliche Gruesse          Joachim Lohoff-Werner


- --- End of forwarded message from Joachim Lohoff-Werner <C0030006@DBSTU1>


Brought to you by Super Global Mega Corp .com