My PC was recently infected by the same virus called "Pretty Park.EXE" and
it emailed itself out to some of the addresses in my address book. In case
your PC is infected, you may clean it up by following the instructions in:
http://www.symantec.com/avcenter/venc/data/prettypark.worm.html
Here is an extract from that page:
When the attached program called "PrettyPark.EXE" is executed, it may
display the 3D pipe screen saver. It will also create a file called
FILES32.VXD in the WINDOWS\SYSTEM directory and modify the following
registry entry value from "%1" %* to FILES32.VXD "%1" %* without your
knowledge:
HKEY_LOCAL_MACHINE\Software\Classes\exefile\shell\open\command
Once the worm program is executed, it will try to email itself automatically
every 30 minutes (or 30 minutes after it is loaded) to email addresses
registered in your Internet address book.
Best Regards,
Prabu Naidu
Learning Matters, Singapore - Principal Consultant
Tel: (65)-3834507 Fax: (65)-3834524 Pager: 9-2162071 Mobile:
9-8333515
email:
prabu@pacific.net.sg
----- Original Message -----
From: Conna Condon <
gandolf@CYBERVERSE.COM>
To: <
MG-ED-DV@MAELSTROM.STJOHNS.EDU>
Sent: 13 February 2000 03:11
Subject: Re: C:\CoolProgs\Pretty Park.exe
> Thanks for the quick post of the warning. When I saw it was an exe I
> suspected as much.
>
> It is quite possible that this person does not know they are infected with
a
> virus and that the virus that infected them is sending it out to everyone
on
> his/her email address list.
>
> If anyone has opened the file please get an update and warn everyone on
your
> list that you might have unintentionally sent it.
>
> If you received the email and did not open it, you are only carrying the
> virus... you can clean and delete or delete safely. You only become
> infected if you actually run the .exe file.
>
> hint. even if you know a person really really well never open an
attachment
> without virus checking.
>
> ----- Original Message -----
> From: "Marina Onken" <
marina@ONKEN.COM>
> To: <
MG-ED-DV@MAELSTROM.STJOHNS.EDU>
> Sent: Saturday, February 12, 2000 6:09 AM
> Subject: Re: C:\CoolProgs\Pretty Park.exe
>
>
> > I just received this file, and it is infected with a virus. Everyone,
> > please do not open this file, just delete it immediately.
> >
> > Who is this guy, anyway?
> >
> > At 02:22 PM 2/12/00 +0000, you wrote:
> > >Test: Pretty Park.exe :)
> > >
> > > Terry La Combe
> >
> >
> > Marina Onken
> > Assistant Professor of Management
> > College of Business Administration
> > Loyola University New Orleans
> > 6363 St. Charles Ave.
> > New Orleans, LA 70118
> > (504) 864-7933
> > <http://www.onken.com/>
> >
>