[aus-soaring] Fw: VIRUS ALERT - W32/Nimda@MM --A Really Mean One

[Peter Stephenson]

Title: McAfee.com Dispatch - VIRUS ALERT

It is NOT listed in today's update on Norton. ----- Original Message ----- From: Fcohen888 To: F8 Sent: Wednesday, September 19, 2001 12:08 PM Subject: FW: VIRUS ALERT - W32/Nimda@MM --A Really Mean One Please note that this virus is reputed by McAfee to have he capability for executing its attached file even if the recipient doesn't open it!       BAD NEWS!!!       Fred         -----Original Message----- From: McAfee.com Dispatch [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 18, 2001 8:33 PM To: [EMAIL PROTECTED] Subject: VIRUS ALERT - W32/Nimda@MM     Home  |  Anti-Virus  |  My Account Info  |  Login   |  Subscribe   Virus Fixes Click here to find out more about W32/Nimda@MM. Become a McAfee.com subscriber and check your system online. Click here. Purchase the latest copy of VirusScan, please click here. Purchase the VirusScan Maintenance Plan which entitles you to updates and an upgrade to the latest version of VirusScan, click here. Download the latest DAT files, click here. Anti-Virus Tips Find out how to detect and prevent viruses with these handy tips. Click here. Special Offers SAVE $20 and prevent online fraud! Get Visual Trace for $19.95 (USD) -- half off of the regular price $39.95. Click Here. Get a 2-year subscription of VirusScan Online now only $39.90 (USD)! SAVE $10!Click here. Corporate Users Click here — W32/Nimda@MM — Dear Fred: McAfee.com has seen a large and growing number of systems infected with the W32/Nimda@MM. This is a HIGH RISK virus that is spread via email. W32/Nimda@MM also spreads via open shares, the Microsoft Web Folder Transversal vulnerability (also used by W32/CodeBlue), and a Microsoft content-type spoofing vulnerability. The email attachment name VARIES and may use the icon for an Internet Explorer HTML document. It will also attempt to spread itself as follows: The email messages created by the worm include content that allows the worm to execute the attachment even if the user does not open it. It modifies HTML documents, so that when this infected window is accessed (locally or remotely), the machine viewing the page is then infected. Once infected, your system is used to seek out others to infect over the Web. AVERT is currently analyzing this threat and will post more details online shortly. Click Here for detection and removal instructions for W32/Nimda@MM virus. McAfee.com VirusScan Online and Clinic subscribers: If you don't have ActiveShield installed and updated, you are not protected from this virus. Click Here to download ActiveShield. Retail VirusScan Users: Version 4.0.70 and above with DAT file 4157 will detect and remove this worm. To download the latest DAT files, Click Here. [ You are currently subscribed as: [EMAIL PROTECTED] ] McAfee.com Support: To contact us about this Dispatch, click here. Subscribe: If you received this message from a friend and would like to subscribe to McAfee.com Dispatch, click here. Unsubscribe: If you do not wish to receive email, click here. Note: Promotions are subject to change without notice. Click here to view our permission policy. Copyright � 2001 McAfee.com Corporation / All Rights Reserved.