HISTLING: approval required (200038)

[L-Soft list server at U. of South Carolina (1.8b)]

Dear Colleagues,
The following posting about a virus has been sent by G. Banti. I have
checked it with our computer services center here and have ascertained
that this is a real virus (not a hoax like the Good Times Virus). However
campus again (and probably elsewhere). It has been publicized for
over a year, so virus checkers should snag it.
 
For more info, you can go to the CIAC site:
 
   http://www.nha.com/ciac6165.html
 
Dorothy Disterheft
 
----------------------------Original message----------------------------
This message was originally submitted by G.Banti at AGORA.STM.IT to the HISTLING
list at VM.SC.EDU. You can approve it using the "OK" mechanism, ignore it, or
repost an edited  copy. The message will expire automatically  and you do not
need to do anything if you just want  to discard it. Please refer to the list
owner's  guide  if you  are  not  familiar  with  the "OK"  mechanism;  these
instructions  are  being kept  purposefully  short  for your  convenience  in
processing large numbers of messages.
 
------------------------ Original message (39 lines) --------------------------
Return-Path: <G.Banti at AGORA.STM.IT>
Received: from UNIVSCVM (NJE origin SMTP at UNIVSCVM) by VM.SC.EDU (LMail V1.2a/1.8
a) with BSMTP id 3256; Sun, 27 Oct 1996 11:42:34 -0500
Received: from agora.stm.it by VM.SC.EDU (IBM VM SMTP V2R3) with TCP;
   Sun, 27 Oct 96 11:42:29 EST
Received: (from root at localhost) by agora.stm.it (8.7.5/8.6.6) id SAA20250; Sun,
 27 Oct 1996 18:43:07 GMT
From: G.Banti at agora.stm.it
Message-Id: <199610271843.SAA20250 at agora.stm.it>
To: histling at vm.sc.edu
Date: Sun,  27 Oct 96 18:36:33 GMT
Subject: Hello, I got this warning from Waruno Mahdi through the ArcLing
 mailing-list. Giorgio
 
 
----
 
I have no idea whether this is serious or just a hoax. In the latter
instance I apologize in advance, but just in case, here it is for whatever
it is worth.
 
Regards,   Waruno
 
----
 
Subject: VIRUS WARNING
 
DO NOT DOWNLOAD ANY FILE NAMED PKZIP300 REGARDLESS OF EXTENSION.
      A NEW Trojan Horse Virus has emerged on the Internet with the
      name PKZIP300.ZIP, so named as to give the impression that this
      file is a new version of the PKZIP software used to "zip"
      compressed files DO NOT DOWNLOAD THIS FILE UNDER ANY
      CIRCUMSTANCES!! If you install or expand the file,
      the virus WILL wipe your hard disk clean and affect
      modems at 14.4 and higher. This is an extremely destructive
      virus & there is NOT yet a way of cleaning this one up.
 
           PLEASE PASS THIS ON TO ANYONE YOU KNOW.