Hi Y'all! You know I don't usually forward Virus Warnings; but, I received this one from our State Office IT dept. I took a little look into it; and, noticed that: (1) It affects other E-Mail programs like Netscape - NOT just Outlook or Outlook Express; (2) It changes "Subject", "Message" and "Attachment" names preventing easy identification; (3) It has a high damage payload (see just below my sig...). Not trying to scare y'all - Just a heads up so y'all can update your virus definitions. Thanks! ~Lisa * Payload: Large scale e-mailing: Uses email addresses from the Windows Address Book files and Outlook Express Sent Items folder. Causes system instability: Overwrites hard drives, erases CMOS, flashes the BIOS. Releases confidential info: It could send confidential Microsoft Word documents to others More Details at the Links Below: http://www.ca.com/virusinfo/encyclopedia/descriptions/magistr24876.htm http://vil.mcafee.com/dispVirus.asp?virus_k=99040&; http://www.sarc.com/avcenter/venc/data/w32.magistr.html A bit "off topic"; but, sorta interesting... :) http://mast.mcafee.com/mast/mass_map.asp? ps: Please excuse me if you have already received a notice from anyone else... I just wanted to be sure everyone had the opportunity to protect themselves by updating their virus definitions.. /lys ----- Original Message ----- From: Selk,Lisa <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, March 15, 2001 4:09 PM Subject: FW: DESTRUCTIVE e-mail worm circulating > http://www.sarc.com/avcenter/venc/data/w32.magistr.html > > Mom, > > This one affects Netscape, too. If the computer freezes up at all; > Please do NOT reboot it! Let me look at it first (the damage is > done during the reboot...). > > Love, > Lisa > > -----Original Message----- > From: TDHS,Broadcast > To: List Reg. Information Technology Directors; List Help Desk; List > Regional Network Manager; List Regional Systems Sp.; List LAN Technical > Services > Sent: 3/14/01 11:41 AM > Subject: DESTRUCTIVE e-mail worm circulating > > Please do not respond to this broadcast mailbox. Follow your normal > information/referral or problem reporting procedures. > > Be advised that there is a new DESTRUCTIVE e-mail worm circulating. > > W32.Magistr can be detected as W98.Levi.3205 sometimes due to the > polymorphic nature of this threat. Also due to its polymorphic nature, > the email that W32.Magistr comes with does not have a static subject line, > message body, or attachment filename. > > It is very destructive, and highly contagious. > > We are not yet aware of any infections at TDHS at this time. > > Symantec has released definition files to take care of this worm. They > are dated 3/13/2001. DSS staff are currently working to get them on the > Gateway, Microsoft Exchange Servers, and all servers and PCs running > Norton AntiVirus. > > We recommend all troubleshooters be notified about this threat. > > There is no need at this time to notify the users of the threat. > However, it is highly recommended that all end users running the > Non-Corporate Norton Antivirus ( IE. NAV 5.0) run the Norton "LIVE > UPDATE" as soon as possible. > > More information can be read at W32.Magistr.24876@mm > <mailto:W32.Magistr.24876@mm>: > <http://www.sarc.com/avcenter/venc/data/w32.magistr.html> > > If you discover the virus on any workstation, immediately unplug the > pigtail from the workstation to disconnect it from the LAN and contact > State Office Immediately. _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com ---- post: [EMAIL PROTECTED] url: http://theMezz.com/informant forum: http://theMezz.com/bbs subscribe: [EMAIL PROTECTED] unsubscribe: [EMAIL PROTECTED] digest: [EMAIL PROTECTED] notDigest: [EMAIL PROTECTED] ____________________________________________________________ T O P I C A -- Learn More. Surf Less. Newsletters, Tips and Discussions on Topics You Choose. http://www.topica.com/partner/tag01
