===========================================================================
Packet: PROGUILD
Date: 06-26-93 (07:51)             Number: 687
From: WINFRED HU                   Refer#: NONE
  To: ALL                           Recvd: NO
Subj: TM411-4.ZIP has VIRUS          Conf: (262) L-TELEMATE
---------------------------------------------------------------------------
This message was from HIIND to ALL
originally in conference COMPC_GEN in DELPHI

                    ----------------------------------------

At 4:03 pm, today H.I.Industries comfirmed a virus present in some
support files for Telemate version 4.11.  The specific files are
37VESA.COM and 67VESA.COM found in the self-extracting file VESA.EXE in
the TM411-4.ZIP file.

The virus is not at this time found to be dangerous.  The virus is based
on the Civil War Virus.  It is only infects .COM files increasing length
by 302 bytes.  The virus is 307 bytes long.  On execution of an infected
program the virus will search for and infect the next .COM file in the
directory list. This virus can be confirmed using F-Prot 2.08a only in
heuristic or quick scan modes.  The will detect a virus called PROTO-T.
The reason for this is that Proto-T is also a variant of the Civil War
Virus.  Delete all infected files. We are working on a removal program.

Marc Tolbert
Director of Virus Research
H.I.Industries

                    ----------------------------------------

A replacement called TM411-4A.ZIP is released to replace the
TM411-4.ZIP. Inside TM411-4A.ZIP is the bug-fixed GIFLink 1.12 and the
clean self-extract VESA.EXE with 37VESA.COM and 67VESA.COM removed.

TM411-4A.ZIP is now available in our support BBSs and distribution sites:

 Land of the Gypsy's  Oregon,   USA    ---- 503-297-0626 14400 V32bis
 Late Night BBS  (*)  New York, USA    ---- 315-564-5700 14400 HST/ds
 PC Connect      (*)  Toronto,  Canada ---- 416-733-9052  2400
 User To User #1      Dallas,   USA    ---- 214-492-6565 14400 HST/ds
 User To User #2      Dallas,   USA    ---- 214-492-5695  9600 V32

 (*) Real name logon only. "Telemate Telemate" logon not supported.

 Egghead's Place                 (313)537-5704     16800 V32bis/HST
 Jesus Is Lord BBS               (803)776-0323      9600 V32bis
 The Agency BBS                  (803)821-2745     14400 V32bis
 The Bloom County                (313)582-0888     14400 V32bis
 The Freq Shop BBS               (616)629-4354     14400 V32bis/HST
 The Agency BBS                  (803)821-2745     14400 V32bis
 The Hideaway!                   (517)569-2332     14400 V32bis
 The Quantum BBS                 (410)239-8379     14400 V32bis

Winfred Hu
Author of Telemate

 * SLMR 2.1a * GIFLink v1.1: The Abyss (403)489-7019
---
  RoseMail 2.10: ILink: PC Connect  Toronto, On.  416-733-9052
