Re: GEN: Virus in LM_NET mail

[Peter Milbury <pmilbury@ERICIR.SYR.EDU>]

Dear LM_NET Colleagues,

I have now received a couple of dozen messages from LM_NET members who
have experienced some form or version of what appears to be a "trojan
horse" (e-mail virus) that has appeared on the Internet around
mid-December, 1999. It is called: "W32.NewApt.Worm".

If you would like some information about dealing with software viruses,
there is a collection of FAQ documents at:
   http://www.cert.org./other_sources/viruses.html#I

Here is some of what the Symantec website said about this virus:

"W32.NewApt.Worm is a multi-threaded worm that propagates by email. The
worm has its own SMTP (email) engine to email itself. The worm will search
various files on the hard drive to find email address that it sends itself
out to.

The worm will send an email that contains one of the two following
messages (depending on HTML support in the email client).

HTML compatible email clients:
 http://stuart.= messagemates.com/index.html
 Hypercool Happy New Year 2000 funny programs and animations
 We attached our recent animation from this site in our mail! Check it
out!

Non-HTML compatible email client:
 he, your lame client cant read HTML, haha.
 click attachment to see some stunningly
 HOT stuff"

Most antivirus software vendors have information about this virus. A list
of anti-virus software vendors is available at:
http://www.cert.org./other_sources/viruses.html#VI


Peter Milbury, Co-owner of LM_NET          pmilbury@ericir.syr.edu
Now With 11,000+ Members       See: http://ericir.syr.edu/lm_net/
................................................................
  See: Peter Milbury's Collection of School Librarian Web Pages
       http://www.cusd.chico.k12.ca.us/~pmilbury/lib.html
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=
All postings to LM_NET are protected under copyright law.
To quit LM_NET (or set-reset NOMAIL or DIGEST), send email to:
listserv@listserv.syr.edu   In the message write EITHER:
1) SIGNOFF LM_NET 2) SET LM_NET NOMAIL or 3) SET LM_NET DIGEST
4) SET LM_NET MAIL  * Please allow for confirmation from Listserv.
For LM_NET Help see: http://ericir.syr.edu/lm_net/
Archives: http://askeric.org/Virtual/Listserv_Archives/LM_NET.html
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=