Discovered: December 08, 1999
Updated: February 13, 2007 11:58:10 AM
The following message has been sent by email. It is a hoax. The programs mentioned in the virus hoax exist, but do not contain any viruses.
The hoax message includes the following:
IF YOU HAVE RECEIVED ANY OF THESE GAMES =
FROGAPULT.EXE ELFBOWL.EXE (FROG GAME) & (ELF BOWLING GAME)
PLEASE CAN YOU DELETE THEM COMPLETELY OUT OF YOUR SYSTEM AS THEY BOTH HAVE A DELAYED VIRUS ATTACHED TO THEM THAT WILL BE ACTIVATED ON CHRISTMAS DAY AND WILL WIPE OUT YOUR SYSTEM. LET EVERYONE KNOW OF THIS.
Symantec Security Response has received many submissions of the above mentioned programs. These games are products of NVISION DESIGN,INC (including the Y2KGAME.EXE), and all have confirmed all to be free of viruses.
You can confirm the programs are clean of viruses by comparing the CRC-32 values with the size of the programs in question using PKZIP software:
- FROGPULT.EXE, CRC32: e0b827fa, SIZE: 1021952 bytes
- ELFBOWL.EXE, CRC32: ae35e713, SIZE: 1130496 bytes
- Y2KGAME.EXE, CRC32: 80a08aeb, SIZE: 1830612 bytes