[ Evariste® | Forum ]

From patrick.schouller@inria.fr Tue Sep  7 09:20 MET 1999
To: (Suppression de la liste des destinataires)
From: Patrick Schouller 
Subject: COMMENT ELIMINER LE VIRUS PRETTY PARK

MEFI - SEI-DIGITIP-STSI-SDPP-PS-1999-247
Bonjour

Il est possible que certains, comme moi, aient été contaminés par le virus
Pretty Park. Le processus d'éradication est le suivant

From: "Pentcho Botchkov" 
Date: Mon, 30 Aug 1999 17:43:43 +0300

Dear friends and business partners,
Once again please accept my apologies for the virus PRETTY PARK .EXÅ which was
probably send to you automatically from our server as a part from my mailing
list.
Please check if you have the following file located in your c:\windows\system\
directory :
Files32.VXD
If yes your PC is infected you must do the following:
1. Erase the file c:\windows\system\files32.vxd.
2. Start the program regedit.exe trough Windows start menu - RUN
3. Search for "FILES32.VXD" in regedit. Change the entry
"FILES32.VXD"%1"%* to "%1"%*
4. Reboot
Once you execute the virus, it will try to email itself every 30 minutes to
all
email addresses registered in your address book.
Please forward this message to all people that might be affected.
For more info www.symantec.com/avcenter/venc/data/prettypark.worm.html
Best regards
P. Botchkov


Ministère de l'Economie, des Finances et de l'Industrie
Secrétariat d'Etat à l'Industrie
Direction générale de l'Industrie, des Technologies de l'Information et de la
Poste
Service des Technologies et de la Société de l'Information
Sous Direction des Programmes et de la Prospective
le BERVIL - 12 rue Villiot  - 75572 PARIS CEDEX 12
Téléphone : 01 53 44 94 25 - Télécopie 01 53 44 98 51

From patrick.schouller@inria.fr Tue Sep  7 09:20 MET 1999
Received: from fontainebleau.ensmp.fr (fontainebleau [192.54.148.100])
	by paris.ensmp.fr (8.8.8/8.8.8) with ESMTP id JAA08191
	for ; Tue, 7 Sep 1999 09:20:15 +0200 (MET DST)
Received: from relay2.eunet.fr (relay2.eunet.fr [192.134.192.149])
	by fontainebleau.ensmp.fr (8.8.8/8.8.8) with SMTP id JAA05948
	for ; Tue, 7 Sep 1999 09:17:33 +0200 (MET DST)
Received: from relay5.eunet.fr by relay2.eunet.fr (5.65c8d/96.05.03)
	via EUnet-France id AA05873; Tue, 7 Sep 1999 09:18:54 +0200 (MET)
Received: from relay2.eunet.fr (relay2.eunet.fr [192.134.192.149])
	by relay5.eunet.fr (8.8.5/8.8.5) with ESMTP id JAA21437;
	Tue, 7 Sep 1999 09:18:47 +0200 (MET DST)
Received: from vautour-smtp.alize ([194.250.149.34])
	by relay2.eunet.fr (8.8.5/8.8.5) with SMTP id JAA05713;
	Tue, 7 Sep 1999 09:17:46 +0200 (MET DST)
Message-Id: <199909070717.JAA05713@relay2.eunet.fr>
X-Sender: schoulle@pop-rocq.inria.fr
X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0.2
Date: Tue, 07 Sep 1999 09:01:58 +0200
To: (Suppression de la liste des destinataires)
From: Patrick Schouller 
Subject: COMMENT ELIMINER LE VIRUS PRETTY PARK
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by paris.ensmp.fr id JAA08191
Content-Type: text/plain; charset="iso-8859-1"
Content-Length:  1537
Status: O

MEFI - SEI-DIGITIP-STSI-SDPP-PS-1999-247
Bonjour

Il est possible que certains, comme moi, aient été contaminés par le virus
Pretty Park. Le processus d'éradication est le suivant

From: "Pentcho Botchkov" 
Date: Mon, 30 Aug 1999 17:43:43 +0300

Dear friends and business partners,
Once again please accept my apologies for the virus PRETTY PARK .EXÅ which was
probably send to you automatically from our server as a part from my mailing
list.
Please check if you have the following file located in your c:\windows\system\
directory :
Files32.VXD
If yes your PC is infected you must do the following:
1. Erase the file c:\windows\system\files32.vxd.
2. Start the program regedit.exe trough Windows start menu - RUN
3. Search for "FILES32.VXD" in regedit. Change the entry
"FILES32.VXD"%1"%* to "%1"%*
4. Reboot
Once you execute the virus, it will try to email itself every 30 minutes to
all
email addresses registered in your address book.
Please forward this message to all people that might be affected.
For more info www.symantec.com/avcenter/venc/data/prettypark.worm.html
Best regards
P. Botchkov


Ministère de l'Economie, des Finances et de l'Industrie
Secrétariat d'Etat à l'Industrie
Direction générale de l'Industrie, des Technologies de l'Information et de la
Poste
Service des Technologies et de la Société de l'Information
Sous Direction des Programmes et de la Prospective
le BERVIL - 12 rue Villiot  - 75572 PARIS CEDEX 12
Téléphone : 01 53 44 94 25 - Télécopie 01 53 44 98 51

========================