Re: GEN: Virus in LM_NET mail

[Wanda Nall <wnall@TENET.EDU>]

This is the one that came to me but I guess my Cheyenne caught it OK and I
think I have deleted everything that was associated with it.  What about
the site for messagemates?  What is that site?  Sounds like cards and
things would it be contaminated also?



At 04:50 PM 1/4/2000 -0500, Peter Milbury wrote:
>Dear LM_NET Colleagues,
>
>I have now received a couple of dozen messages from LM_NET members who
>have experienced some form or version of what appears to be a "trojan
>horse" (e-mail virus) that has appeared on the Internet around
>mid-December, 1999. It is called: "W32.NewApt.Worm".
>
>If you would like some information about dealing with software viruses,
>there is a collection of FAQ documents at:
>   http://www.cert.org./other_sources/viruses.html#I
>
>Here is some of what the Symantec website said about this virus:
>
>"W32.NewApt.Worm is a multi-threaded worm that propagates by email. The
>worm has its own SMTP (email) engine to email itself. The worm will search
>various files on the hard drive to find email address that it sends itself
>out to.
>
>The worm will send an email that contains one of the two following
>messages (depending on HTML support in the email client).
>
>HTML compatible email clients:
> http://stuart.= messagemates.com/index.html
> Hypercool Happy New Year 2000 funny programs and animations
> We attached our recent animation from this site in our mail! Check it
>out!
>
>Non-HTML compatible email client:
> he, your lame client cant read HTML, haha.
> click attachment to see some stunningly
> HOT stuff"
>
>Most antivirus software vendors have information about this virus. A list
>of anti-virus software vendors is available at:
>http://www.cert.org./other_sources/viruses.html#VI
>
>
>Peter Milbury, Co-owner of LM_NET          pmilbury@ericir.syr.edu
>Now With 11,000+ Members       See: http://ericir.syr.edu/lm_net/
>................................................................
>  See: Peter Milbury's Collection of School Librarian Web Pages
>       http://www.cusd.chico.k12.ca.us/~pmilbury/lib.html
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=
>All postings to LM_NET are protected under copyright law.
>To quit LM_NET (or set-reset NOMAIL or DIGEST), send email to:
>listserv@listserv.syr.edu   In the message write EITHER:
>1) SIGNOFF LM_NET 2) SET LM_NET NOMAIL or 3) SET LM_NET DIGEST
>4) SET LM_NET MAIL  * Please allow for confirmation from Listserv.
>For LM_NET Help see: http://ericir.syr.edu/lm_net/
>Archives: http://askeric.org/Virtual/Listserv_Archives/LM_NET.html
>=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=
>
>
Wanda Nall
Library Media Specialist
Northwest Primary School
400 Moreman
Hereford, TX 79045
wnall@tenet.edu

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=
All postings to LM_NET are protected under copyright law.
To quit LM_NET (or set-reset NOMAIL or DIGEST), send email to:
listserv@listserv.syr.edu   In the message write EITHER:
1) SIGNOFF LM_NET 2) SET LM_NET NOMAIL or 3) SET LM_NET DIGEST
4) SET LM_NET MAIL  * Please allow for confirmation from Listserv.
For LM_NET Help see: http://ericir.syr.edu/lm_net/
Archives: http://askeric.org/Virtual/Listserv_Archives/LM_NET.html
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=