-Caveat Lector-

*****************************************************************
****************** SYMANTEC SECURITY ALERT **********************
*************** Alert! [EMAIL PROTECTED] ********************
*****************************************************************
WARNING:           [EMAIL PROTECTED]
Threat level:      Category 3
Type:              Worm
Virus Definitions: February 24, 2003 or later (via LiveUpdate)
********************************************************
What is [EMAIL PROTECTED] and how does it affect me?
********************************************************
[EMAIL PROTECTED] is a variant of [EMAIL PROTECTED]
This worm contains mass-mailing and backdoor functionality.
There are no major functionality differences between this
variant and [EMAIL PROTECTED] This variant appears to
have been re-compiled with a different compiler, and then
packed with the same runtime compression utility as
[EMAIL PROTECTED]
To replicate, [EMAIL PROTECTED] creates its own
emails, adds infected attachments to each email, and
then emails each infected message. The email message is
one of the following:
Subject: Documents
Attachment: Docs.exe
Body: Send me your comments...
Subject: Roms
Attachment: Roms.exe
Body: Test this ROM! IT ROCKS!.
Subject: Pr0n!
Attachment: Sex.exe
Body: Adult content!!! Use with parental advisory.
Subject: Evaluation copy
Attachment: Setup.exe
Body: Test it 30 days for free.
Subject: Help
Attachment: Source.exe
Body: I'm going crazy... please try to find the bug!
Subject: Beta
Attachment: _SetupB.exe
Body: Send reply if you want to be official beta tester.
Subject: Do not release
Attachment: Pack.exe
Body: This is the pack ;)
Subject: Last Update
Attachment: LUPdate.exe
Body: This is the last cumulative update.
Subject: The patch
Attachment: Patch.exe
Body: I think all will work fine.
Subject: Cracks!
Attachment: CrkList.exe
Body: Check our list and mail your requests!
**************************************************
WHAT ACTION CAN I TAKE FROM HERE?
**************************************************
Symantec Security Response posted virus definitions
to protect against this threat on February 24, 2003
(via LiveUpdate). All users of Norton AntiVirus who
do not have up-to-date virus protection should
immediately run LiveUpdate for protection
from [EMAIL PROTECTED]
Virus definitions are available via the LiveUpdate
feature in the Norton AntiVirus product or the
Symantec Security Response Web site:
http://securityresponse.symantec.com/avcenter/defs.download.html
Symantec Security Response encourages all Norton
AntiVirus users to regularly download virus definitions
in order to protect against future threats. For more
information on how to run LiveUpdate, please go here:
http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/1999121613163206
<UPGRADE CUSTOMERS>
If you have an older version of Norton AntiVirus
and would like to upgrade to Norton AntiVirus 2003,
please go here:
http://nct.symantecstore.com/0001/upgrade_center.html
<NEW CUSTOMERS>
If you would like to purchase Norton AntiVirus 2003,
Please go here:
http://www.symantecstore.com/51410/nav
**************************************************
Sincerely,
Symantec Security Response Team
Symantec Corporation
******************  Scan for Viruses. Free! ********************
Free Service. Check your system online using Symantec's award-
winning virus detection technology to determine if it is
infected by any known virus or Trojan horse.
Click Here -> http://www.symantec.com/securitycheck
*********************   Special Offers  *************************
Visit the Symantec Store Web site for comprehensive security
solutions and special Symantec promotions.
Click Here -> http://www.symantecstore.com/51410
For non-English products, please visit our global store at:
http://www.symantecstore.com/global/
***********  Subscribe to Symantec Security Alert ***************
Subscribe to the Symantec Security Alert to find out about the
latest worms, viruses and Trojans. Click here to subscribe:
http://nct.symantecstore.com/virusalert
******************************************************************
Copyright (c) 1995-2003 Symantec Corporation. All rights reserved.
Other brands and products are trademarks of their
respective holder(s).
DO NOT REPLY TO THIS MESSAGE. If you require Customer Service or
Technical Support, please check the Symantec Web site for contact
information at http://www.symantec.com
Should you wish not to receive this Symantec Security Alert
Service, simply unsubscribe or change your e-mail address at:
http://www.digitalriver.com/v2.0-bin/ecm/opt-out?uid=ncu1bz7bz1yekvhj5
For information on Symantec's Return Policy, please
click here: http://www.symantecstore.com/return_policy
Symantec Corporation
20330 Stevens Creek Boulevard
Cupertino, CA 95014

--
Euphorian

<A HREF="http://www.ctrl.org/";>www.ctrl.org</A>
DECLARATION & DISCLAIMER
==========
CTRL is a discussion & informational exchange list. Proselytizing propagandic
screeds are unwelcomed. Substance�not soap-boxing�please!  These are
sordid matters and 'conspiracy theory'�with its many half-truths, mis-
directions and outright frauds�is used politically by different groups with
major and minor effects spread throughout the spectrum of time and thought.
That being said, CTRLgives no endorsement to the validity of posts, and
always suggests to readers; be wary of what you read. CTRL gives no
credence to Holocaust denial and nazi's need not apply.

Let us please be civil and as always, Caveat Lector.
========================================================================
Archives Available at:
http://peach.ease.lsoft.com/archives/ctrl.html
<A HREF="http://peach.ease.lsoft.com/archives/ctrl.html";>Archives of
[EMAIL PROTECTED]</A>

http://archive.jab.org/[EMAIL PROTECTED]/
<A HREF="http://archive.jab.org/[EMAIL PROTECTED]/">ctrl</A>
========================================================================
To subscribe to Conspiracy Theory Research List[CTRL] send email:
SUBSCRIBE CTRL [to:] [EMAIL PROTECTED]

To UNsubscribe to Conspiracy Theory Research List[CTRL] send email:
SIGNOFF CTRL [to:] [EMAIL PROTECTED]

Om

Reply via email to