[Media Caucus] Fwd: Warning of new worm/virus

Tue Jan 27 11:29:24 GMT 2004

Dear all,

there has been a lot of computer virus activity in recent days, and 
many of you may have received strange messages from people you know or 
you don't know. So i am forwarding some information about this current 
virus (a so-called "worm"). It affects the email programme on computers 
running with the Windows operating system, it sends emails from 
infected computers, and it may also pick up other addresses from the 
address books of infected computers and use them as spoof "From:" 
address...

For most of you this will be just a piece of information, but if your 
computer is infected, you can check the links below...

All best,
Arne

>
>
> (Users of Macintosh, Linux, Solaris, UNIX systems and any other 
> computer
> with a modern operating system that is not made by the good people at
> Microsoft Corp. can skip right along to the next message: This does not
> affect you.)
>
> If you're using a Windows-based computer, take a minute to read over 
> the
> following press release (the first of several I'll likely received from
> various computer security companies.) Alternately, point your browser 
> to:
> http://securityresponse.symantec.com/avcenter/venc/data/
> w32.novarg.a at mm.html
>
> A nasty new worm/virus is making the rounds of the Internet. Some call 
> it
> MyDoom; others call it Novarg. Either way, it's yet another nasty bit 
> of
> business.
>
>   One of the things it will do if it infects your machine is send a 
> message
> out to everyone in your address book. The odds are pretty good that if
> you're infected, one of those addresses will be an e-mail you are 
> subscribed to and
> all on the list will find out you're infected.
>
> Or the bug could end up e-mailing members of that list who are in your
> address book.
>
> People who get the virus get it because it appears to be an attachment
> coming from a trusted correspondent. It might have the subject line: 
> "Hello"
> or "Test" and it might be coming from your mother.
>
> At best, the extra e-mail traffic is a bit inconvenient. At worse, you 
> could
> be sending one of your correspondents a nasty payload.
>
> So, if you're using a Windows-based computer, take a minute to read 
> over the
> following press release (the first of several I'll likely received from
> various computer security companies.) Alternately, point your browser 
> to:
> http://securityresponse.symantec.com/avcenter/venc/data/
> w32.novarg.a at mm.html
>
>
> And remember dear listers: Never, ever, open up unsolicited e-mail
> attachments, even if they are from your mother!
>
> From: Central Command Press Release
> [mailto:presslistmgr at centralcommand.com]
> Sent: Monday, January 26, 2004 6:46 PM
> To: press at centralcommand.com
> Subject: [ Central Command Press Release ] Global Virus Outbreak
> Worm/MyDoom
>
>
> *** FOR IMMEDIATE RELEASE ***
>
>
> Central Command warns all Internet users of a new computer worm named 
> Worm/MyDoom
>
> First serious virus outbreak in 2004, feared to top Sobig.F
> as most prevalent Internet worm and become all time leader
> in just days
>
> MEDINA, Ohio January 26, 2004 Central Command, a leading
> provider of PC anti-virus software and computer security
> services, announces the discovery of Worm/MyDoom. This new
> aggressive Internet worm is spreading globally with heavy
> concentrations initially in the United States and Europe.
>
> "We're seeing fast spreading malicious worms being released
> one after another today," said Steven Sundermeier, Vice
> President of Products and Services at Central Command, Inc.
> "Unfortunately, initial reports of Worm/MyDoom have already
> surpassed the other new releases in a matter of minutes. The
> alarming rate of submissions closely mimics that of later
> variants of Worm/Sobig.F. This has all the characteristics
> of being the next big one."
>
> Central Command's Emergency Virus Response Team has already
> confirmed over 3800 infections of Worm/MyDoom in fewer than
> 45 minutes of initial discovery.
>
> Details of the Internet worm:
>
> Name: Worm/MyDoom
> Alias: W32.MyDoom at mm
> Type: Internet Worm
> Discovered: January 26, 2004
> Size: 22.528KB
> Platform: Windows 95/98/Me/NT/2000/XP
>
> Description:
>
> Worm/MyDoom is an Internet worm that has been seen spreading
> through email. The worm arrives through e-mail in the
> following format:
>
> Subject: <varies - some observed subjects include>
>
> "Test" "test" "Status"
>
> Body: <varies - some observed body messages include>
>
> "The message cannot be represented in 7-bit ASCII encoding
> and has been sent as a binary attachment."
>
> "Mail transaction failed. Partial message is available."
>
> "test"
>
> Attachment: <varies - some observed attachments include>
>
> document.zip
> document.pif
> doc.scr
> message.pif
> readme.exe
> file.zip
> message.zip
> oia.zip
> text.zip
>
> About Central Command: A leader in the anti-virus industry,
> Central Command, Inc., a privately held company, serves home
> PC users and industrial, financial, government, education
> and service firms with virus protection software, services,
> and information.  The company services customers in over 98
> countries and is headquartered in Medina, Ohio. Visit
> Central Command online at http://www.centralcommand.com
>
> ###
>
> Contacts:
> Steven Sundermeier, Product Manager
> Central Command, Inc.
> E-mail: ssundermeier at centralcommand.com
> Cell: +1 330 350 2515
> Phone: +1 330/723-2062 x204
> Fax: +1 330/722-6517
>
>
>
> ---
>
> = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
> Via / By / Excerpted / From / Thanks to:
>
> David Akin
> -----------------
> CAJ-L Deputy Moderator
> -----------------
> CTV News
> The Globe and Mail
> -----------------
> Office: 416.313.2503
> Mobile: 416.528.3819
> -----------------
> Complete Contact Information at
> http://www.davidakin.com
> Blog: http://davidakin.blogware.com
> -----------------------------------------------------------
> Are you a member of the Canadian Association of Journalists?
> Learn how to join today at: http://www.caj.ca
>
>
> (c)info
> http://tinyurl.com/jkkw
> http://members.tripod.com/~media002/disclaimer.htm
> Due to the nature of email & the WWW, check ALL sources.
> http://tinyurl.com/h4m7
> http://media002.tripod.com/
> Member http://www.carcc.ca/  & http://www.caj.ca
> "You must be the change you wish to see in the world."
> (Gandhi)
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/enriched
Size: 6949 bytes
Desc: not available
Url : http://mailman-new.greennet.org.uk/pipermail/media/attachments/20040127/82201020/attachment.bin