[Date Prev][Date Next][Thread Prev][Thread Next][Date Index
][Thread Index
]
[lbnews] new virus
<html>
Hi All,Does anyone know if this warning is bogus?
--------------------------------------------------<br>
<<font color=3D"#0000FF"><u>dispatch@xxxxxxxxxx</font></u><font color=3D"=
#000000">>
<br>
Two variants of the Melissa virus, Melissa.u and Melissa.v, are
beingreported in numerous locations. Both viruses arrive in the form of
aninfected Word document attached to email. When the infected document
isopened, the virus infects Word's global template, Normal.dot. Once
theglobal template is infected, all future Word documents will be
infected. Because these variants spread rapidly via email, delete data,
and arebeing widely reported, AVERT Labs has placed both viruses on the
AVERTWatch List with an initial risk assessment of medium.
***************************************** To identify infected emails,
look at the subject line and body text of themessage. The subject line
for an email infected with Melissa.u is"pictures" and the body
tag is "what's up?". The subject line for an emailinfected with
Melissa.v is "My Pictures" and the body tag is blank. If
youreceive an email with either of these two subject lines, do not open
theattachment. ***************************************** Delete the email
immediately! Both variants delete data and spread very rapidly. Melissa.U
invokes a MAPI email client and sends itself to the first fouremail
addresses in your Address Book (including distribution lists). Itthen
attempts to render your system inoperable by deleting the followingsystem
files: c:\io.sys, d:\command.com, d:\io.sys,
c:\Ntdetect.com,c:\Suhdlog.dat, and d:\Suhdlog.dat Melissa.v invokes a
MAPI client and sends itself to the first fortyaddresses in your Address
Book. It then attempts to delete files anddirectories in the root of
mapped drives with the following letters: M, N,O, P, Q, S, F, I, X, Z, H,
and L. An infection of either variant within an organization can cause
the lossof numerous files due to the viruses' actions on mapped
drives.<br>
</font>
<BR>
</html>