[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: WARNING - Christmas Virus
This appears to be the same virus that is described at
http://vil.nai.com/vil/dispVirus.asp?virus_k=98889
This site has removal instructions based on the method of infection
described. It appears to be a matter of removing the files infecting
the computer. Thanks for the heads-up.
Arel Lucas
----------------
Jill Schneider wrote:
>
> A heads-up from one of our national network administrators. The usual
> cautions apply.....
> ------------------------------------------------------------------------------------
>
> Good Morning,
> This is an advisory of a network trojan now being distributed. Christmas
> Carols and Santa TROJ_MUSIC.A is a network-enabled Trojan, disguised as a
> simple program that displays graphics and plays a tune. The graphic is that
> of Santa Claus and the tune played is a well-known Christmas carol, "We
> Wish You a Merry Christmas." Upon execution, TROJ_MUSIC.A modifies the
> Windows registry, and drops files into the system directory to propagate
> via e-mail. Although the samples reported so far are nondestructive, this
> Trojan has the capability to download upgrades from the Internet, which may
> be more malicious. Please remind your users to always "detach"
> attachments, rather than using "view" or "launch". If your office receives
> a copy of this email, do not open it and PLEASE send email to GS-W
> Security.
>
> Sample of the e-mail text:
>
> Subject: Testing to send file
> Message Body: Hi, just testing email using Merry Christmas music file,
> not bad music.
>
> -- or --
>
> Message Body: Hi, just testing email using Merry Christmas music file,
> you'll like it.
> Attachment: MUSIC.COM or MUSIC.EXE or MUSIC.ZIP
A posting from the Archives & Archivists LISTSERV List!
To subscribe or unsubscribe, send e-mail to listserv@listserv.muohio.edu
In body of message: SUB ARCHIVES firstname lastname
*or*: UNSUB ARCHIVES
To post a message, send e-mail to archives@listserv.muohio.edu
Or to do *anything* (and enjoy doing it!), use the web interface at
http://listserv.muohio.edu/archives/archives.html
Problems? Send e-mail to Robert F Schmidt <rschmidt@lib.muohio.edu>