Well this isn't a new worm. This is one that came out in August. There is a pretty good write up at Symantec's website that includes a clean-up procedure at the URL: http://securityresponse.symantec.com/avcenter/venc/data/w32.annoying.worm.html It seems to be just a rather annoying....not malicious virus and for the most part preys on people that accept the file within MSN Messenger which auto-runs attachments. I would recommend that you push your friends to get Anti-virus software and maybe perhaps some type of personal firewall to help prevent this user from shooting their self in the foot. So check out the URL above. If you would like more information on this, I recommend that you also chat with other virus researchers at security focus's virus mailing list at http://www.securityfocus.com/virus Hope that helps. --Scott At 05:12 PM 11/19/2001 -0800, J wrote: >List: > > > >I ve recently spoken with a couple of my Joe-Internet user friends who are >reporting having received an IM from one of their MSN Messenger >list-buddies saying Hey, you want this picture? or something along those >lines (sorry I can t be more exact- these are users afterall) with a >picture attachment. > > > >They clicked to open (of course) and a message appears saying This file >may be corrupted. Cannot open or some similar verbage& > > > >The killer is now they are unable to access a lot of their personal >account pages, etc, and other list buddies are asking them Why did you >send this to me? , which suggests some type of automated script or simple >Trojan takeover. > > > > > >Anyone on the list seeing anything strange? Is this a new delivery for Sub7? > > > > > >Jeremiah --- Scott Fendley [EMAIL PROTECTED] Systems/Security Analyst (501) 575-2022 University of Arkansas (501) 575-4753 _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
