R:981228/0517Z @:NL3DAV.ZH.NLD.EU #:33499 [Leiderdorp] FBB7.00f $:726-NL1AFK
R:981229/0422Z @:NL3ZMR.ZH.NLD.EU #:31661 [Zoetermeer] FBB7.00g $:726-NL1AFK
R:981228/0803Z @:NL3LDM.ZH.NLD.EU #:25882 [L.dam] FBB7.00f $:726-NL1AFK
R:981227/2101Z @:NL3RTD.ZH.NLD.EU #:37277 [Rotterdam-Noord] $:726-NL1AFK
R:981227/1428Z @:SP1BBS.ZH.NLD.EU #:54899 [Spijkenisse] $:726-NL1AFK

From: NL1AFK@SP1BBS.ZH.NLD.EU
To  : VIRUS@NLD.EU

 þ Als idioten konden vliegen zou dit een vliegveld zijn.
 ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ
 Msg:2720 Dat:27-12-1998 Time:14:24:32 From:NL1AFK@SP1BBS
 Title:First HTML virus
 ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹ Tst MsgFilter v1.06c Í͹
ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄĶToplogo creator (c) 1997-1998 by PD0OLNºÄÄÄÄÄÄ


From INTERNET :
(All my message "From INTERNET" are via a friend who have an INTERNET access.
 73's of Ludovic.)

Begin :

 Central Command announces the discovery of the first HTML virus.

 Central Command, the US and Canada Distributor of AntiViral Toolkit Pro
 today announced that detection and removal of the worlds first HTML
 virus has been added to AntiViral Toolkit Pro.

 "Recently we have seen a shift in virus writing.  The virus authors are
 focusing on the World Wide Web as a means of infecting unsuspecting
 users.  With the discovery of WinScript.Rabbit last week and today
 HTML.Internal we are seeing a changing virus development strategy."
 Said Keith Peer, President of Central Command.

 This new virus searches for HTML files on local hard disks and infects
 them.  To replicate itself the virus uses inline script routines
 written in Visual Basic.  The virus will replicate only if the browser
 security settings allows script routines to access disk files.

 The header of infected HTML file contains the reference for a script
 which is the viruses main routine that is executed automatically when a
 browser accesses the infected file.  The virus searches for all *.HTM

 and *.HTML files in the current and all parent directories and infects
 them.  While infecting the virus moves the file down and writes itself
 to the beginning of the file without any damage for the host file data.

 The virus header contains the text ID-line:


   


 After infecting the virus displays the text to the Windows status bar:


 HTML.Prepend /1nternal

 Detection and removal of HTML.Internal is available in the latest
 version of AntiViral Toolkit Pro released on November 8, 1998.

 Central Command has made time limited fully functional evaluation
 versions of AntiViral Toolkit Pro available on it's web site at
 http://www.avp.com.

End
                                
Rock On

                           73 Henk 'The Rocker'

      Pc:486Dlc 40MHz Tnc:KPC-3 v5.1 Trx:Maxon MX-1000 Ant:1/2 golf GPA
 ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ Sponsored by the PanCake House ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ
                           SP1BBS Tel-BBS:0181-641718
                                  NL3TD(NL-NET)
    ((( This message is in Super Surround Dolby Stereo where available )))