[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

WARNING - Christmas Virus



A heads-up from one of our national network administrators.   The usual
cautions apply.....
------------------------------------------------------------------------------------


Good Morning,
This is an advisory of a network trojan now being distributed.  Christmas
Carols and Santa TROJ_MUSIC.A is a network-enabled Trojan, disguised as a
simple program that displays graphics and plays a tune. The graphic is that
of Santa Claus and the tune played is a well-known Christmas carol, "We
Wish You a Merry Christmas." Upon execution, TROJ_MUSIC.A modifies the
Windows registry, and drops files into the system directory to propagate
via e-mail.   Although the samples reported so far are nondestructive, this
Trojan has the capability to download upgrades from the Internet, which may
be more malicious.  Please remind your users to always "detach"
attachments, rather than using "view" or "launch". If your office receives
a copy of this email, do not open it and PLEASE send email to GS-W
Security.



Sample of the e-mail text:


Subject: Testing to send file
Message Body: Hi, just testing email using Merry Christmas music file,
not bad music.


-- or --


Message Body: Hi, just testing email using Merry Christmas music file,
you'll like it.
Attachment: MUSIC.COM or MUSIC.EXE or MUSIC.ZIP

A posting from the Archives & Archivists LISTSERV List!

To subscribe or unsubscribe, send e-mail to listserv@listserv.muohio.edu
      In body of message:  SUB ARCHIVES firstname lastname
                    *or*:  UNSUB ARCHIVES
To post a message, send e-mail to archives@listserv.muohio.edu

Or to do *anything* (and enjoy doing it!), use the web interface at
     http://listserv.muohio.edu/archives/archives.html

Problems?  Send e-mail to Robert F Schmidt <rschmidt@lib.muohio.edu>