[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: WARNING - Christmas Virus



This appears to be the same virus that is described at

http://vil.nai.com/vil/dispVirus.asp?virus_k=98889

This site has removal instructions based on the method of infection
described.  It appears to be a matter of removing the files infecting
the computer.  Thanks for the heads-up.

Arel Lucas
----------------
Jill Schneider wrote:
>
> A heads-up from one of our national network administrators.   The usual
> cautions apply.....
> ------------------------------------------------------------------------------------
>
> Good Morning,
> This is an advisory of a network trojan now being distributed.  Christmas
> Carols and Santa TROJ_MUSIC.A is a network-enabled Trojan, disguised as a
> simple program that displays graphics and plays a tune. The graphic is that
> of Santa Claus and the tune played is a well-known Christmas carol, "We
> Wish You a Merry Christmas." Upon execution, TROJ_MUSIC.A modifies the
> Windows registry, and drops files into the system directory to propagate
> via e-mail.   Although the samples reported so far are nondestructive, this
> Trojan has the capability to download upgrades from the Internet, which may
> be more malicious.  Please remind your users to always "detach"
> attachments, rather than using "view" or "launch". If your office receives
> a copy of this email, do not open it and PLEASE send email to GS-W
> Security.
>
> Sample of the e-mail text:
>
> Subject: Testing to send file
> Message Body: Hi, just testing email using Merry Christmas music file,
> not bad music.
>
> -- or --
>
> Message Body: Hi, just testing email using Merry Christmas music file,
> you'll like it.
> Attachment: MUSIC.COM or MUSIC.EXE or MUSIC.ZIP

A posting from the Archives & Archivists LISTSERV List!

To subscribe or unsubscribe, send e-mail to listserv@listserv.muohio.edu
      In body of message:  SUB ARCHIVES firstname lastname
                    *or*:  UNSUB ARCHIVES
To post a message, send e-mail to archives@listserv.muohio.edu

Or to do *anything* (and enjoy doing it!), use the web interface at
     http://listserv.muohio.edu/archives/archives.html

Problems?  Send e-mail to Robert F Schmidt <rschmidt@lib.muohio.edu>