R:990624/0350Z @:NL3LEI.ZH.NLD.EU #:14816 [Leiden] FBB7.00g23 $:2600-NL1ABK
R:990624/0314Z @:NL3DAV.ZH.NLD.EU #:8849 [Leiderdorp] FBB7.00g23 $:2600-NL1ABK
R:990623/0431Z @:NL3LDM.ZH.NLD.EU #:28198 [Leidschendam] FBB7.00g23
R:990623/0031Z @:NL3IPR.IPR.NLD.EU #:33343 [IPR] FBB7.00g23 $:2600-NL1ABK
R:990622/1012Z @:SK1BBS.FRL.NLD.EU #:9943 [Sneek/Snits] FBB7.00-NL1ABK
R:99061/2134Z @:NL3BUR.FRL.NLD.EU #:27604 [Burum] FBB7.00g $:2600-NL1ABK

From: NL1ABK@NL3BUR.FRL.NLD.EU
To  : MONEY@NLD


[¯¯¯ TST HOST 1.43b, UTC diff:5, Local time: Mon Jun 21 22:24:10 1999 ®®®]

        Hoii iedereen !

In de EXE in de arj file zit het Major.1644 virus !!

Het blijkt dat niet alle scanners hem pakt ! (TBAV,F-prot,Mcafee pakken hem
wel) probeer evt. een OUDERE versie !

hier wat het virus doet enz.:

Information about the Major.1644 virus.

This virus is known to infect COM files, EXE files, but unknown variants may
infect other items as well.

1644 bytes

It remains resident in memory and infects/damages its victims in the
background.

The virus is encrypted using a trivial encryption scheme. There is no simple
signature that can be used to find it. However, the better anti-virus
scanners should not have any problems detecting this virus.


Cleaning information:
Before cleaning or restoring, it is HIGHLY RECOMMENDED to boot from a clean,
write-protected system diskette first! This is necessary to ensure that no
viruses are active in memory, and to reduce the risk that you execute an
infected file by accident.

The best thing to do is to restore all executable files from a backup, or to
signature that can be used to find it. However, the better anti-virus
scanners should not have any problems detecting this virus.


Cleaning information:
Before cleaning or restoring, it is HIGHED to boot from aclean,
write-protected system diskette first! This is necessary to ensure that no
viruses are active in memory, and to reduce the risk that you execute an
infected file by accident.

The best thing to do is to restore all executable files from a backup, or to
re-install them from their original disks. If speed or ease is more
important than data integrity, you may attempt to separate the virus from
the file with a cleaner, such as TbClean. Results are always depending on
the exact virus variant you may have, on the lay-out of the victim file, and
your system configuration.


As new variants of existing viruses appear almost daily, it is possible
that you will encounter a variant of this virus which will still be
identified by our scanner, but behaves differently than described above. The
information above is therefore intended as a basic guideline.

                              73 Alco



       ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÑÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÑÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
       º Sysop   : Alco  ³Bak    : DANITA 640    ³Computer: 486DX66  º
       º Woonpl. : Kollum³Modem1 : Baycom 1200 bd³Memory  : 8mb      º 
       º QTH     : JO33BF³modem2 : DL4OFG 9600 bd³Hardisk : 360 mb   º   
       ÇÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄĶ
       º             Call 27MC : NL1ABK@NL3BUR.FRL.NLD.EU            º
       º             Call      : PE2ABK                              º
       ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ