Path: chuka.playstation.co.uk!scea!peter_alau@playstation.sony.com
From: matth@bellatlantic.net (Matthew Hulett)
Newsgroups: scea.yaroze.freetalk
Subject: A new type of security threat?
Date: Thu, 29 Oct 1998 09:57:03 GMT
Organization: SCEA News Server
Lines: 40
Message-ID: <36383b30.79566@news.scea.sony.com>
NNTP-Posting-Host: client-119-65.bellatlantic.net
X-Newsreader: Forte Free Agent 1.11/32.235

   I just came across this in cyberspace. I thought I would ask the
computer sauvy members in this group for any elaboration of this new
threat to our computers, and would provide a heads-up. Is this true?

------------------------------------------------------------------------------------------------------

>Be warned. A new rash of BACK ORIFICE-type programs are
>circulating.

>For those who do not know, Back Orifice and it's kin are NOT viruses, they
>are remote administration tools... somewhat like PC ANYWHERE. It allows a
>remote user to actually control your machine. They will have access to
>your entire hard disk(s), They can send or take files, grab your
>passwords, erase or add whatever they wish to your drives and, generally,
>copy or destroy any sort of  files on your disk.


>I just got hit with it. I do a lot of ftping & ircing and it seems someone
>uploaded it to me. Luckily, AVP virus software alerted me to it.

>In my case it was disgused as OCE.EXE in my Windows/SYSTEM dir. If you
>have this file, get rid of it. Also, for security reasons, you should
>consider that your system has been raped and all your info is in the hands
>of others.

>The OCE.EXE varient is a less dangerous version that seems to mostly clog
>your inet connection. Without your knowledge, it will attempt to use your
>dial-up connection in Win95/98 to access a remote site. I use a cable
>modem and not dial-up so it did nothing to me.

>For some more info, check out:

>http://www.ozemail.com.au/~dwarren/backorifice/questandansw.html

>Good luck! Be safe. Be smart. Be well.
--------------------------------------------------------------------------------------------------------------------

   Any feedback appreciated.

-Matt