The Virus Hoax and other Urban Legends
Richard Masoner (richardm@cd.com)
Fri, 16 Feb 1996 10:05:57 -0600 (CST)
This is way off topic for this list, but I've received *numerous*
messages this week on the "GOOD TIMES" virus, which supposedely
will trash your hard drive if you so much as read the email entitled
"GOOD TIMES." Here's the "canonical" warning:
Apparently , a new computer virus has been engineered by a user of
America Online that is unparalleled in its destructive capability.
Other, more well-known viruses such as Stoned, Airwolf, and
Michaelangelo pale in comparison to the prospects of this newest
creation by a warped mentality.
What makes this virus so terrifying is the fact that no program
needs to be exchanged for a new computer to be infected. It can be
spread through the existing e-mail systems of the InterNet.
Luckily, there is one sure means of detecting what is now known as
the "Good Times" virus. It always travels to new computers the
same way - in a text e-mail message with the subject line reading
simply "Good Times". Avoiding infection is easy once the file has
been received - not reading it. The act of loading the file into
the mail server's ASCII buffer causes the "Good Times" mainline
program to initialize and execute.
The program is highly intelligent - it will send copies of itself
to everyone whose e-mail address is contained in a received-mail
file or a sent-mail file, if it can find one. It will then proceed
to trash the computer it is running on.
The bottom line here is - if you receive a file with the subject
line "Good TImes", delete it immediately! Do not read it! Rest
assured that whoever's name was on the "From:" line was surely
struck by the virus. Warn your friends and local system users of
this newest threat to the InterNet! It could save them a lot of
time and money.
Doesn't it just strike fear into your hearts? Well, it's a HOAX.
There is absolutely no way an email message loaded into a computer's
"ASCII buffer" (whatever that is) can execute all by itself. (Well,
if you want to nitpick - okay yes its possible, but not in the way
"GOOD TIMES" is described). A later version mentions a totally bogus
FCC warning, along with this hilarious phrase:
If the program is not stopped, the computer's processor will
be placed in an nth-complexity infinite binary loop - which
can severely damage the processor if left running that way too
long.
For those of you who don't know what an nth-complexity infinite binary
loop is, it's in the same class of objects as jabberwockies, infinite
improbability generators, the FCC modem tax, the various "totally legal"
Make Money Fast schemes, the Neiman-Marcus/Mrs-Fields $250 Cookie Recipe
story, the Starship Enterprise, Santa Claus and the Tooth Fairy -- i.e.
they're all completely fictitious (for the trekkies out there, sorry to
break the news to ya).
This hoax first appeared late in 1994, and resurfaced various times
last year with a few variations. I thought it died last summer, but
I'm once again receiving *numerous* messages warning me about this
supposed virus.
For those of you who fell for the warning and forwarded the message
to the dozens of people on your personal email list, don't feel too
bad -- the wording in the hoax is quite strong. You should protect
your machine from viruses by running a virus-checking utility on any
executable you download from the 'net or a BBS service or get from a
floppy. Use a virus checker regularly on your system to scan for
viruses.
For more information on "GOOD TIMES," some interesting reading can be
found in the "GOOD TIMES FAQ" at:
http://www-mcb.ucdavis.edu/info/virus.html
The mini-FAQ is at:
ftp://usit.net/pub/lesjones/Good-Times-Virus-Hoax-Mini-FAQ
The Computer Incident Advisory Capability (CIAC) declaring Good Times
as a hoax can be found at:
ftp://ciac.llnl.gov/pub/notes/
http://ciac.llnl.gov/ciac/
The CIAC usually issues bulletins on computer security problems.
More "urban legends" kind of stuff can be found at:
ftp://cathouse.org/pub/cathouse/urban.legends/AFU.faq
http://cathouse.org/UrbanLegends/AFUFAQ/
Be advised that cathouse.org does have some pretty profane material.
If you are an America Online user, "GO VIRUS2" for AOL's official
statement on the Good Times Virus.
Richard Masoner