!!!  COMPUTER  VIRUS   WARNING  !!!

     Home home_b1.jpg (1110 bytes)         link1.jpg (1232 bytes) Links

On July 10th 2001, Finnertys (New Inn) received an e-mail from the United States warning that a "PC virus" had been detected in an attachment to an e-mail which appeared to come from the address: wfinnerty@eircom.net

The type of virus which caused the problem has now been identified. It seems to be best know as W32.Magistr.24876@mm . (It is also known as: I-Worm.Magistr,   PE_MAGISTR.A,  and  W32.Magistr@mm .)

Based on written reports we have seen, it seems that the behaviour of this virus is very subtle in some respects. IF LEFT UNATTENDED FOR TOO LONG, IT CAN BECOME VERY DESTRUCTIVE.


For additional information on virus W32.Magistr.24876@mm please see:

SARC Write-up - W32.Magistr.24876@mm

WEBMASTERS may wish to consider the following sentence issued by the United States Navy (dated June 8th 2001): "As an additional precaution, all mail Server hosts should be blocking out *.mm files." Full text at:

US Navy W32.magistr.24876@mm Macro Virus


WARNING:

If you have had any kind of e-mail contact with this site (normal or otherwise), or, if you have viewed any of our web pages - some of which contain links to other web sites - during June/July 2001, we would suggest that you BACK-UP  IMPORTANT  PERSONAL &  BUSINESS INFORMATION  FIRST, and then check your computer system for virus W32.Magistr.24876@mm as soon as possible AFTERWARDS. For those who might not have the necessary software to carry out this test, please note that at the present time it is possible to download a free package from the Internet which can detect this particular virus (through the following link):

AVG Anti-Virus System (Main Page)


For those wishing to know more about COMPUTER VIRUS PREVENTION, RECOGNITION, AND REMOVAL please see:

Virus Bulletin Home Page


THE   POLICE   HAVE  BEEN  INFORMED
REGARDING  ABOVE  PROBLEM

| Original e-mail | Copies to: |


List of threats to local environment


bfish-r.gif (267 bytes) 
        TRANSLATE THIS PAGE AUTOMATICALLY BY COMPUTER
| Traductions | Übersetzungen | Traduzioni | Traduções | Traducciones |
bfish.gif (370 bytes)

        Home home_b1.jpg (1110 bytes)         link1.jpg (1232 bytes) Links

copy

From: William Finnerty
To: TV3 ; Tuam Herald ; TG4 (Newsdesk) ; Sunday Business Post ; RTE (Irish National TV Station) ; Irish Times ; Irish Independent Newspaper Group (Unison) ; Irish Examiner Newspaper ; Irish Emigrant Newspaper ; Ireland On Sunday ; Galway Advertiser Editor (Mr Declan Varley) ; Connacht Tribune Editor (Mr John Cunningham) ; Galway Bay FM (local Radio Station)
Sent: Wednesday, July 11, 2001 9:16 AM
Subject: Fw: Virus Warning  (COPIES TO IRISH MEDIA)

PLEASE DO NOT OPEN ANY ATTACHMENTS TO E-MAILS WHICH MAY APPEAR TO COME FROM ME


---- Original Message -----
From: William Finnerty
To: Labour Party ; Fine Gael ; Sinn Fein ; Green Party ; Democratic Left
Sent: Wednesday, July 11, 2001 9:15 AM
Subject: Fw: Virus Warning  (COPIES TO OPPOSITION PARTIES)

PLEASE DO NOT OPEN ANY ATTACHMENTS TO E-MAILS WHICH MAY APPEAR TO COME FROM ME


----- Original Message -----
From: William Finnerty
To: beverly.cooper_flynn@oireachtas.ie ; denis.foley@oireachtas.ie ; harry.blaney@oireachtas.ie ; jackie.healy-rae@oireachtas.ie ; liam.lawlor@oireachtas.ie ; mildred.fox@oireachtas.ie ; seamus.healy@oireachtas.ie ; tom.gildea@oireachtas.ie ; tony.gregory@oireachtas.ie ; michael.lowry@oireachtas.ie
Sent: Wednesday, July 11, 2001 9:13 AM
Subject: Fw: Virus Warning (COPIES TO INDEPENDENT POLITICIANS)

PLEASE DO NOT OPEN ANY ATTACHMENTS TO E-MAILS WHICH MAY APPEAR TO COME FROM ME


----- Original Message -----
From: William Finnerty
To: Prime Minister Bertie Ahern ; Minister Noel Dempsey ; Minister Michael Smith ; Minister Mary O'Rourke ; Minister Joe Walsh ; Minister James McDaid ; Minister Frank Fahey ; Minister Dermot Ahern ; Minister Charlie McCreevy ; Minister Brian Cowen ; Deputy Prime Minister Mary Harney ; Justice Minister John O'Donoghue ; Heritage Minister Sile de Valera ; Health Minister Micheal Martin
Sent: Wednesday, July 11, 2001 9:12 AM
Subject: Fw: Virus Warning  (COPIES TO GOVERNMENT)

PLEASE DO NOT OPEN ANY ATTACHMENTS TO E-MAILS WHICH MAY APPEAR TO COME FROM ME


From: William Finnerty
To: eamon.ocuiv@oireachtas.ie ; Michael D Higgins ; michael.kitt@oireachtas.ie ; Minister Bobby Molloy ; paul.connaughton@oireachtas.ie ; ulick.burke@oireachtas.ie ; padraic.mccormack@oireachtas.ie ; Minister Noel Treacy ; frank.fahey@oireachtas.ie
Sent: Wednesday, July 11, 2001 9:09 AM
Subject: Fw: Virus Warning  (COPIES TO COUNTY GALWAY POLITICIANS)

PLEASE DO NOT OPEN ANY ATTACHMENTS TO E-MAILS WHICH MAY APPEAR TO COME FROM ME

I'm pretty sure someone is trying to propagate a computer virus using my e-mail address. In so far as I can judge, they are NOT using my computer directly to do this. Instead, they seem to have come in (off the Internet while I've been on-line) and taken some (or possibly all) of the names in my e-mail address book: and then gone on from there. Apparently, this kind of thing is now happening a lot; and it is the main way that the people concerned use to spread a PC virus. 

As you will see below, I have now reported this whole business to the police here in Ireland, and to Eircom (my Internet Service Provider). You will see also that it is not the only piece of Internet trouble I've had in the past few weeks.

|||||||||||||||||
Email:  wfinnerty@eircom.net
Web site:  http://homepage.eircom.net/~williamfinnerty/
||||||||||||||||||


original

Original of "virus warning" e-mail to Garda Síochána
(Republic of Ireland Police)

www.garda.ie

----- Original Message -----
From: William Finnerty
To: Assistant Police Commissioner (Galway area)
Cc: Police Commissioners Office
Sent: Tuesday, July 10, 2001 6:10 PM
Subject: Fw: Thanks (from Finnerty's)

Garda reference: P.S. 219/01

Dear Assistant Commissioner Keating,

I am writing to let you know that the false-reading on my web site which I reported earlier has now been corrected by Eircom. Please see copy of e-mail to Steffen Higel at Eircom below. In an effort to protect my own interests, I have now placed an outline of this mysterious business at the following www address:
http://homepage.eircom.net/~williamfinnerty/hit-counter.htm

I feel I should also mention that during the past 24 hours I have started to receive e-mails (from people I know) which suggest that someone MIGHT be using my e-mail address to propagate a computer virus. Please see copy of second e-mail below to K****** F*******.

Sincerely,

Mr. William Finnerty.


First E-Mail:

----- Original Message -----
From: William Finnerty
To: Steffen Higel
Cc: Valerie Doherty (Eircom Customer Services) ; Eircom Webmaster ; Bill Crawford (Eircom Customer Services) ; Eircom Accounts Deptartment ; Danial Dunne ; Doras Editor (Eircom)
Sent: Tuesday, July 10, 2001 4:31 PM
Subject: Thanks (from Finnerty's)

Dear Steffen,

The correct number was restored to the hit-counter at my web-site yesterday.

I am very grateful to you for the corrective action you have taken.

For several reasons I feel I should point out that my costs in attempting to have this matter resolved were in the region of £1000; and my hope is that Eircom will consider it appropriate to compensate me in some way for this unexpected and unwanted expense. As I see it, I played no part at all in creating (and sustaining) the problem; and, for reasons that are still a complete mystery to me, some people at Eircom appear to have falsely believed that the error in question could not be corrected under any circumstances (as their e-mails to me testify).

Sincerely,

Mr. William Finnerty.

||||||||||||||||||
Email:  wfinnerty@eircom.net
Web site:  http://homepage.eircom.net/~williamfinnerty/
||||||||||||||||||


Second E-Mail:

----- Original Message -----

From: William Finnerty <wfinnerty@eircom.net>
To: K***** F******* <info@d************.com>
Cc: Doras Editor (Eircom) <editor@doras.ie>; Danial Dunne <helpdesk@eircom.net>; Valerie Doherty (Eircom Customer Services) <dohertyv@indigo.ie>; Eircom Webmaster <webmaster@eircom.net>; Bill Crawford (Eircom Customer Services) <bill.crawford@indigo.ie>; Eircom Accounts Department <billing@eircom.net>
Sent: Tuesday, July 10, 2001 5:02 PM
Subject: Re: "Add new DWORD Value".

> K******,
>
> I don't know what this is all about.
>
> Yours is one of three e-mails I have very recently received with reference
> to something which suggests (to me) that someone MIGHT be trying to
> propagate a virus using my e-mail address. One person (in the US) has
> told me that their scanner actually reported the presence of a virus (possibly
> in some kind of attachment).
>
> Also, a cousin in New Zealand has told me about a virus people
> experienced there which gets into PCs and sends e-mails to all the
> addresses it can find: causing chaos.  (He told me about that several
> weeks ago.)
>
> For obvious reasons, I am copying this to Eircom.
>
> I have not received a copy of the e-mail in question, and I would suggest
> you seriously consider sending a (full) copy of whatever you have received
> (supposedly from me) to Eircom.
>
> Thank you for contacting me.
>
> Regards,
>
> ||||||||||||||||||
> Email:  wfinnerty@eircom.net
> Web site:  http://homepage.eircom.net/~williamfinnerty/
> ||||||||||||||||||>


> ----- Original Message -----
> From:  K***** F******* info@d************.com
> To: William Finnerty <wfinnerty@eircom.net>
> Sent: Tuesday, July 10, 2001 10:58 AM
> Subject: Re: "Add new DWORD Value".
>
> > William
> >
> > What is this email about. We don't download files unless we know what it
> > is about.
> >
> > K****** F*******
> > D***** ******* Company
> >
> > ---------- Original Message -----
> > >From: William Finnerty <wfinnerty@eircom.net>
> > >Subject: "Add new DWORD Value".
> > >Date: Mon, Jul 9, 2001, 7:57 pm
> > >
> > > Name OpenGL, and set it to the value of 1 to enable the panel.
> > > 5)Repeat the procedure and name the key D3D.
> > > 6)Note: Setting the values to 0 disables the panels.
> >


List of threats to local environment

Top of page

Home home_b1.jpg (1110 bytes)       Archives attic_sa.jpg (1001 bytes) Archives        link1.jpg (1232 bytes) Links

Copyright © 1999 to 2001 by William Patrick Finnerty.
  All rights reserved.

Except for normal Internet search engine purposes,
none of the material on this page may be used
in whole or in part without the prior written consent of
Mr W. P. Finnerty (contact information provided below).

It is of course entirely permissible for anybody
to print the address of this web site,
or to provide electronic links to this web site.

PAGE HISTORY:
First placed on Internet: July 15th 2001
Most recent update:
July 17th 2001
Top of page
Web site design: William (Billy) Finnerty.
Internet www address:  http://homepage.eircom.net/~williamfinnerty/   
  Email:  wfinnerty@eircom.net
Normal Mail: "St Albans", New Inn, Ballinasloe, County Galway, Republic of Ireland.
Top of page     PHONE (from Republic of Ireland):  Ballinasloe (0905) 75825     Top of page
     FAX:  Ballinasloe (0905) 75853

   
PHONE (International):  00 353 905 75825  &  FAX:  00 353 905 75853  

NOTE:   The "visitor number" which appears below might not be correct.
For further information please
click here

SiteAddLogo.gif (7665 bytes)

VISITOR

NUMBER

 SiteAddLogo.gif (7665 bytes)

Home home_b1.jpg (1110 bytes)           Archives attic_sa.jpg (1001 bytes) Archives           link1.jpg (1232 bytes) Links