-Caveat Lector- ------- Forwarded message follows ------- Date sent: Wed, 08 Jan 2003 10:50:32 GMT To: "VirusEye Subscriber" <[EMAIL PROTECTED]> From: [EMAIL PROTECTED] Subject: Virus Alert: W32/Naith.A-mm (MEDIUM LEVEL)
MessageLabs are now stopping a new mass-mailing virus. Initial analysis suggests that comments in the code are familiar, so it is likely to be re-assigned to an existing family at some time. Meanwhile, MessageLabs have called it ‘Naith’ for the time being. >From copies that we have stopped, the email appears to contain various subject lines, body-texts and attachment names. The file attachment is compressed using a hacked version of UPX with a file size of 32,766 bytes. The virus also exploits the MS01-020 vulnerability, which on un-patched machines may permit it to automatically execute without the user’s knowledge. It also appears to attempt to disable certain security software, such as anti-virus or firewall products. The program additionally launches a web browser that opens the Avril Lavigne website. A worrying trend is developing whereby many new viruses harbour the ability to disable desktop security and anti-virus software. Unfortunately, if your anti-virus vendor cannot offer protection against this virus in time for you then the likelihood is that your machine will be compromised before you even know it; by which time it will be too late for any signatures and anyone in your address book will also be sent a copy. Further information on this virus may be found at: www.messagelabs.com/viruseye/report.asp?id=124 This email was sent to you because you subscribe to MessageLabs' Virus Alert service. You can cancel your subscription on the MessageLabs website at http://www.messagelabs.com/AlertUnsubscribe MessageLabs is a leading provider of Internet-level managed email security services. Through its SkyScan portfolio of services, MessageLabs customers are protected from email-borne threats such as viruses, unsolicited mail and pornographic material, before such content comes anywhere near their network boundaries. ______________________________________________________________________ __ This email has been scanned for all viruses by the MessageLabs SkyScan service. For more information on a proactive anti-virus service working around the clock, around the globe, visit http://www.messagelabs.com ______________________________________________________________________ __ ------- End of forwarded message ------- <A HREF="http://www.ctrl.org/";>www.ctrl.org</A> DECLARATION & DISCLAIMER ========== CTRL is a discussion & informational exchange list. Proselytizing propagandic screeds are unwelcomed. Substance—not soap-boxing—please! These are sordid matters and 'conspiracy theory'—with its many half-truths, mis- directions and outright frauds—is used politically by different groups with major and minor effects spread throughout the spectrum of time and thought. That being said, CTRLgives no endorsement to the validity of posts, and always suggests to readers; be wary of what you read. CTRL gives no credence to Holocaust denial and nazi's need not apply. Let us please be civil and as always, Caveat Lector. ======================================================================== Archives Available at: http://peach.ease.lsoft.com/archives/ctrl.html <A HREF="http://peach.ease.lsoft.com/archives/ctrl.html";>Archives of [EMAIL PROTECTED]</A> http:[EMAIL PROTECTED]/ <A HREF="http:[EMAIL PROTECTED]/";>ctrl</A> ======================================================================== To subscribe to Conspiracy Theory Research List[CTRL] send email: SUBSCRIBE CTRL [to:] [EMAIL PROTECTED] To UNsubscribe to Conspiracy Theory Research List[CTRL] send email: SIGNOFF CTRL [to:] [EMAIL PROTECTED] Om
