From: owner-avalon-digest@smoe.org (avalon-digest) To: avalon-digest@smoe.org Subject: avalon-digest V7 #33 Reply-To: avalon@smoe.org Sender: owner-avalon-digest@smoe.org Errors-To: owner-avalon-digest@smoe.org Precedence: bulk avalon-digest Tuesday, January 29 2002 Volume 07 : Number 033 Today's Subjects: ----------------- [AVALON] Looks like virus time again [CoconutTears@aol.com] To leave the list, mail majordomo@smoe.org with: unsubscribe avalon-digest ---------------------------------------------------------------------- Date: Mon, 28 Jan 2002 23:20:21 EST From: CoconutTears@aol.com Subject: [AVALON] Looks like virus time again I'm assuming all of you got 6 emails from timtuck@home.com that are mighty suspicious. Here's the info I got when I out of curiosity typed the supposed link into my browser. (Macs are pretty virus-free.) Karen New Email Worm 'My Party' Surfaces, Begins to Grow Mon Jan 28, 8:07 AM ET LONDON (Reuters) - A new computer bug that tries to trick computer users into clicking on a virus-infected Web link masquerading as party photos emerged in Asia on Monday morning and began spreading to Europe, computer experts said. The so-called "My Party" worm, which is not considered destructive, spreads by infiltrating popular email software Microsoft Windows Address Book and Outlook Express Database. The worm emails itself to every person in an infected users' email log making it look as if the worm comes from a colleague or friend, experts said. Anti-virus specialist Trend Micro gave it a medium risk rating. Security firms said that compared with past email worms, such as Nimda and Sircam, the number of reported "My Party" infections thus far is moderate. The virus arrives as an email with the subject line "new photos from my party!" It contains an innocuous looking file attachment called www.myparty.yahoo.com. A message in the body of the email reads: "Hello! My party... It was absolutely amazing! I have attached my web page with new photos! If you can please make color prints of my photos. Thanks!" Graham Cluley, senior technology consultant for Sophos Anti-Virus, said because it carries what appears to be an authentic link from the popular Web portal Yahoo and appears to come from a colleague or friend, the worm has the potential to spread quickly. As of 1200 GMT, Sophos received reports of infection from corporate clients and academic institutions in Asia, the Middle East and Europe. Sophos has devised a patch at: http:/www.sophos.com/virusinfo/analyzes/w32mypartya.html. ___________________________________________________________________________ The subliminable footer says: To unsub, mail majordomo@smoe.org with: unsubscribe avalon ------------------------------ End of avalon-digest V7 #33 *************************** ======================================================================== For further info, mail majordomo@smoe.org with: info avalon-digest