Vulnerability Development mailing list archives
Fw: Norton AntiVirus SupportNow! VIRUS NOTIFICATION!
From: james () IMAJES CO UK (James Cox)
Date: Tue, 20 Jun 2000 22:36:37 +0100
The newest form seems to be making it's rounds. Be particularly careful with IRC clients (mIRC , Pirch) and of course, Outlook, again ;) imajes99 ----- Original Message ----- From: <es () SYMANTEC COM> To: <NAV-TECHINFO-L () lserver symantec com> Sent: Tuesday, June 20, 2000 7:29 AM Subject: Norton AntiVirus SupportNow! VIRUS NOTIFICATION!
June 19, 2000 _____________________________ In this issue: 1.VBS.Stages.A is a new virus 2.Subscribing and unsubscribing 3.Disclaimer _____________________________ NOTE: This is an outgoing email address. Please do not reply to this email message. If you require assistance installing, configuring, or troubleshooting a Symantec product, or you have a question for Customer Service, please visit the Symantec Service & Support Web site at the following address: http://www.symantec.com/techsupp/ Select your product and version and click Go. To see an HTML version of this newsletter, please visit the following Web site: http://www.symantec.com/techsupp/vURL.cgi/navarc _____________________________ 1.VBS.Stages.A is a new worm. A new virus named VBS.Stages.A was discovered over the weekend. The virus attempts to email a copy of itself to everyone in your Microsoft Outlook address book. It also attempts to spread itself using IRC, mIRC, and PIRCH. The email contains an attachment named LIFE_STAGES.TXT.SHS. The subject line of the email is randomly generated. There are 12 possibilities for the subject line of the email, which will include one of the following phrases: * Life Stages * Funny * Jokes Once LIFE_STAGES.TXT.SHS is executed, a text file will be opened in Notepad displaying the male and female stages of life. A script is executed in the background, which makes some changes to your system. The worm creates several files in the \WINDOWS\SYSTEM\ folder: SCANREG.VBS, VBASET.OLB, and MSINFO16.TLB. The worm modifies the registry to run the worm on startup. A randomly named file is added to the root directory of all mapped drives, the \My Documents folder, and the \Windows\Start Menu\Programs folder. If you receive an email that matches this description, please delete it immediately. For complete information regarding this virus, please point your browser to: http://www.symantec.com/techsupp/vURL.cgi/nav47 To be protected against this virus, be sure to update your virus definitions through LiveUpdate or the Virus Definition Update Installer. If you are unsure as to how to update your virus definitions, please point your browser to one of the following Internet locations: How to Run LiveUpdate http://www.symantec.com/techsupp/vURL.cgi/nav48 How to update virus definition files using the Virus Definition Update Installer http://www.symantec.com/techsupp/vURL.cgi/nav49 _____________________________ 2.Subscribing and unsubscribing If you would like to subscribe to other Symantec newsletters, please visit the following Web site and follow the appropriate instructions: http://www.symantec.com/techsupp/bulletin/index.html If you no longer want to receive this newsletter, let us know by following these steps: 1.Create a new email addressed to: LISTSERV () LSERVER SYMANTEC COM 2.In the Subject line of your email software, type the following: UNSUBSCRIBE 3.In the body of the message, type the following: SIGNOFF NAV-TECHINFO-L 4.Send the message. If you would like to unsubscribe from other Symantec newsletters, please visit the following Web site and follow the appropriate instructions: http://www.symantec.com/techsupp/bulletin/index.html _____________________________ 3.Disclaimer THIS DOCUMENT IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY. This message contains Symantec Corporation's current view of the topics discussed as of the date of this document. The information contained in this message is provided "as is" without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, and freedom from infringement. The user assumes the entire risk as to the accuracy and the use of this document. This document may not be distributed for profit. Symantec and the Symantec logo are U.S. registered trademarks of Symantec Corporation. LiveAdvisor is a trademark of Symantec Corporation. Other brands and products are trademarks of their respective holder(s). (c) Copyright 1999-2000 Symantec Corporation. All rights reserved. Materials may not be published in other documents without the express, written permission of Symantec Corporation.
Current thread:
- Fw: Norton AntiVirus SupportNow! VIRUS NOTIFICATION! James Cox (Jun 20)