The following email was from one of our network administrators in Ottawa.
Good afternoon to ALL.....
A new virus is being automatically distributed on the Internet from a Mail Robot. The
"Music " virus is
being sent out by Mail Host : (hss-dslam-63-182.sk.sympatico.ca [142.165.63.182]
and the sender is unknown. Please advise your users not to download any music from
the Internet.
See attached documentation.
Thank you for your cooperation, Norman Snow, Informatics Security.
=========================================================================
Bonjour � tous.........
Un nouveau virus est pr�sentement distribu� automatiquement par un robot de couriels
sur l'Internet.
Le virus "Music" est propag� � des listes de distributions par le serveur:
(hss-dslam-63-182.sk.sympatico.ca [142.165.63.182 et son exp�diteur nous est inconnue.
S.v.p. aviser vos utilisateurs de ne pas t�l�charger de musique provenant de
l'Internet.
Voir documentation ci-attach�e, merci de votre coop�ration.
Norman Snow, S�curit� Informatique.
=========================================================================
Virus Name : W95/Music@M
Virus Characteristics :
This Internet worm will propagate under all Windows platforms and
WinNT/2000 systems. It also requires the Visual Basic Runtime 5 files to run. These
files could be pre-installed on the latest versions of Windows98 and Windows95. The
worm arrives as an email message containing the following information:
To: All my friends
From: Test Mail
Subject: Testing to send file
Body: Hi, just testing email using Merry Christmas music file, not
bad music.
Attachment: Music.com, Music.zip, or Music.exe
Running the attachment will infect your system. No repair
possible.
Removal : McAfee*s ViruScan V4107