****************************************************************
      *    This is a posting from Stéphane Payet to all Amigians.    *
      ****************************************************************

   From: Stéphane Payet <stephane.payet@wanadoo.fr>
   Date: 06.12.1998, 09:07:59
Subject: If you have datatypes.library v45.4 or 45.4 it is a pirat's trap ! (fwd)

Hi,

*** FORWARDED MESSAGE ***
  Original author: Stéphane Payet
  Written on: 06-Déc-98
*** Beginning of forwarded message ***

Hi,

This a small part of the annonce of Nordic Global:
---------------------------------------------------------------
Official statement from Nordic Global Inc.           12/05/98
------------------------------------------

(originally written on 12/04/98, updated on 12/05/98)
Recommendations
---------------

As a user you should take the following precautions:

- Most passwords were exported through a Trojan in fake versions
  of "datatypes.library" (in "LIBS:"), distributed by a cracker
  group. The fake version has a file size of 32748 bytes, and
  "version" returns either 45.4 or 45.5, depending on how and
  when you check the version.

  If you have that version of the library installed then delete it,
  and replace it with a legitimite version. Either use one of the
  original Workbench versions (39.11 or 40.6), or get the "real"
  version 45.4 (file size: 27780 bytes) from Aminet, and install
  it instead.

  Versions that appear to be safe are: 39.11, 40.6, 45.3, and
  45.4 (but 45.4 only if it has a file size of 27780 bytes).

  After installing a safe version, switch your computer off, wait
  for 30 seconds, and switch it back on.

- Then IMMEDIATELY change the password on your ISP account. Don't
  waste time and effort trying to find out if you are on the list.
  This is pointless, because even if you are not on the list you
  don't know if your account information has become known to
  crackers after the list was compiled.

- There is NO need to change anything in the setup of your
  protocol stack (whether it is Miami, AmiTCP or anything else),
  or to switch protocol stacks, even if friends, dealers or other
  software companies recommend you to do that. In some cases
  known to me companies have, for whatever reasons, unfortunately
  given such incorrect advice to users. The attack was not related
  to or caused by a specific protocol stack.

Holger Kruse, Nordic Global Inc.
kruse@nordicglobal.com
-----------------------------------------------------------------

For more info go to the site and read news.

Regards.
                                                       Stéphane
*** End of forwarded message ***

Regards.