Tic-Tech: virus warning

From: Mark Ahlness (mahlness@cks.ssd.k12.wa.us)
Date: Thu Mar 08 2001 - 06:37:31 PST

  • Next message: Paula Tortorice: "Tic-Tech: SmartBoard Site"

    --- TIC-TECH message:
    Hi All,
    Here's news of another nasty - from the free antivirus program I've been
    (happily) using at home and in the classroom - Mark

    Mark Ahlness
    mahlness@cks.ssd.k12.wa.us

    -------- Original Message --------
    Subject: InoculateIT Personal Edition AntiVirus Newsletter from
    ComputerAssociates, Version 01.07 March 7, 2001
    Date: Wed, 7 Mar 2001 10:00:28 -0500
    From: enews <enews@CA.COM>
    Reply-To: enews_ipe@CAI.COM
    To: enews_ipe@LISTSERV.CAI.COM

    =============================================
    E-News: InoculateIT Personal Edition AntiVirus
    Newsletter from Computer Associates
    Version 01.07 | March 7, 2001
    via www: http://esupport.ca.com
    =============================================

    Table of Contents

    - WIN32/NAKED.WORM Outlook e-mail worm

    - InoculateIT Personal Edition AntiVirus
         Update Number 1154 available

    ==============================================
    WIN32/NAKED.WORM Outlook e-mail worm
    ==============================================

    WIN32/NAKED.WORM is a new worm that has recently
    been seen propagating in the field. Upon
    execution, a flash movie is shown while the worm
    spreads by attaching itself to outbound emails
    sent to all addresses found in the Microsoft
    Outlook Address Book.

    It arrives as an e-mail with the subject line:

    "FW: Naked Wife"

    The message body of the e-mail reads:

    > My wife never look like that! ;)
    Best Regards,
    UserName

    The message contains the attachment
       "NakedWife.exe"

    A damaging payload will delete various .dll,
    .exe, .com, .ini, .bmp, and .log files both
    in the default windows and the windows system
    directory, rendering the system unbootable
    in most cases. Restoration should be made
    using your latest system backup.

    IPE signature update 1154 includes detection
    for this threat.

    =============================================
    VIRUS UPDATE 1154
    =============================================

    The latest AntiVirus Update has been uploaded
    to the Computer Associates web site for you
    to download.

    To download the new signature files for IPE
    without going through your Web browser, you can
    use the new "Auto Download" feature inside
    IPE (Tools, AutoDownload) or the AutoDownload
    application to check for updated signatures,
    download, and install them.

    Alternatively, the update file can be obtained
    at the following URL:
    http://antivirus.ca.com/cgi-bin/ipe/update.cgi

    It is recommended that once you have downloaded
    and installed an update that you do a virus
    scan of all the files on your system and
    create a new reference disk for your system.

    We recommend that you keep your anti-virus
    protection up-to-date at all times by ensuring
    you are running the most up-to-date anti-virus
    software (Current IPE version 5.2) and that latest
    update kit.

    These update kits are cumulative: therefore the
    latest update kit includes everything from all
    previous update kits as well as the new virus
    information.

    These update kits are NOT complete versions of
    IPE but an update which will allow version 5.2
    to detect and clean the latest viruses.

    =============================================

    Additional information on viruses, worms, and
    Trojan can be found at Computer Associates
    Virus Information Center:
    http://www.ca.com/virusinfo/

    Carnegie Mellon Software Engineering Institute
    (CERTŪ Coordination Center):
    http://www.cert.org/advisories/

    =============================================

    To subscribe to this or other newsletters, go
    to http://esupport.ca.com/index.html?ENews.

    You can unsubscribe from the same E-News page or
    by sending an email to mailto:listserv@listserv.ca.com
    with 'signoff enews_ipe' in the message body.

    This newsletter contains practical tech support
    information about relevant issues with our
    products.

    =============================================

    Feedback? Comments? Suggestions?
    Send mailto:editor_ipe@cai.com. All submissions
    become the property of the publisher and may or
    may not be reprinted.

    NOTE: This address should be used only for feedback
    on this newsletter. Requests for technical support
    should be submitted through normal channels.
    - End TIC-TECH message. To join, leave, or visit
      the message archive, go to Tic-Tech on the Web:
      http://fp.seattleschools.org/fpclass/tic-tech/



    This archive was generated by hypermail 2b29 : Thu Mar 08 2001 - 10:27:01 PST


    Learning Space Development Server
    This page under development for The Learning Space
    Copyright ©1996-2000 by the Authors - All Rights Reserved
    Unauthorized use prohibited.