Virus Profile: Frogs and Fishes Hoax

Threat Search
Virus Profile information details
Risk Assessment: Home N/A | Corporate N/A
Date Discovered: 3/1/1999
Date Added: 5/27/1999
Origin: N/A
Length: N/A
Type: Hoax
Subtype: E-mail
DAT Required: N/A

Virus Characteristics

AVERT HOAX and Virus Update!!

NAI Labs AVERT would like to inform you of a new email HOAX that has an association with a real virus.

We are advising users who receive the email below to delete it and to NOT pass it on as this is how an email HOAX propagates.

Below is the actual text from the message that may be received via email.

If you've had forwarded Frog blender and Fish bowl to you, PLEASE get rid of them ASAP. Seems there is a terrible virus attached to them set to go on MAY 28th. If you do not delete them, your hard drive will get wiped out. Please delete these two immediately and run your virus protection.

Please be advised:
That I have been informed that the joke regarding the frog being splattered in a blender and the similar fish joke both contain viruses set to execute on the 28th of May and if you still have them on your hard drive to delete them a.s.a.p.

The programs were called blender.exe and fish.exe. PLEASE make sure everyone has deleted it and run their virus check program.

This virus is the worst one yet - it wipes your harddrive completely. Remember to check your temp. files as well to make they are not lurking there, and also to make sure that you empty out your Recycle / Delete bins.


Please forward this to anyone you may have sent this e-mail to!!!
- This is the end of the email message

Again if you receive this email delete it and DO NOT pass it on

While AVERT is advising users to delete the message above, we are also cautioning users about the files mentioned in the email. There have been isolated cases where the files, a.k.a Frog in the Blender, and Fish-in-a-Bowl have been infected with the CIH virus, which has a payload date of the 26th, not the 28th. In most cases the files analyzed by AVERT do not have the infection.

AVERT advises all users to scan all files received via email before running them and in this case the best approach is to delete them. If you have either, or both files; have scanned them and got a clean report, but still have a concern send them to .

A Division of NAI Labs


PC Infected? Get Expert Help

Virus Removal Service

Connect to one of our Security Experts by phone. Have your PC fixed remotely - while you watch!