----- Original Message ----- From: ITrain Information Services <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, March 04, 2000 9:05 AM Subject: PrettyPark Worm Overloads Email Servers Subscription maintenance instructions at the end of this message. ITINFO Sponsor -------------------- Training Express brand computer learning guides Certified by ITrain, the International Association of Information Technology Trainers. Instructor-led training materials for all popular software applications. Printed and electronic formats with plenty of hands-on exercises. Sample guides available online. [EMAIL PROTECTED] Training Express: http://itrain.org/books/ -------------------- PRETTYPARK WORM OVERLOADS EMAIL SERVERS by Dave Murphy, [EMAIL PROTECTED] Internet email users should be on the alert for a variant of the PrettyPark worm. The new version is known as W32/Pretty.worm.unp and it is delivered as an email attachment. When opened, the worm spreads to all addresses in the user's address book and mails itself out to the addresses every 30 minutes. The flood of mail traffic can overwhelm mail servers. Windows NT users of Outlook Express should look for the subject line, "C:\coolprogs\prettypark.exe" as a tip off to having received an infected file. W32/Pretty.worm.unp is the unpacked edition of the original "W32/Pretty.worm" Internet worm. It was discovered on February 15, 2000. Network Associates' AVERT, in response to the worm's continued, rapid spread, has upgraded its risk assessment to HIGH for W32/Pretty.Worm.unp. This risk assessment includes Windows 95/98/NT systems. The worm, in addition to mailing itself to all addresses in the email address book, will It will attempt to connect to an IRC server and join a pre-determined IRC channel in such a way that the worm's author could use the IRC connection to retrieve private information such as the computer name, registered owner, registered organization, system root path, and Dial Up Networking username and passwords. To detect and prevent adverse effects from this worm, I recommend you download and install the most recent anti-virus DAT files for McAfee VirusScan. Call for Comments What do you think? Leave your comments on the message center: http://itrain.org/msg/ References Network Associates: http://www.nai.com/ McAfee DAT Updates: http://download.mcafee.com/updates/superDat.asp Message Center: http://itrain.org/msg/ This article is posted to http://itrain.org/itinfo/2000/it000304.html Live well, do good, --Dave Murphy -------------------- Do you ever wonder who reads ITinfo? Subscriber demographics are posted at http://itrain.org/itinfo/ad.html Don't forget to complete the ITINFO subscriber's survey at http://itrain.org/itinfo/subscribe.html -------------------- The ITINFO newsletter is again accepting sponsors. Each edition is is distributed via email and permanently posted on the itrain.org website. Sponsorship details are posted at http://itrain.org/itinfo/ad.html ---------- ITINFO is an electronic publication of ITrain, the International Association of Information Technology Trainers. Comments and submissions to [EMAIL PROTECTED] Previous issues are online at http://itrain.org/itinfo/ ---------- To unsubscribe, email [EMAIL PROTECTED] with a 1-line body: UNSUBSCRIBE ITINFO email_address [substituting the email address you subscribed to the list] Do not send subscription messages to any other address, and do not reply to this message with your subscription maintenance request, your request will not be processed. ---------- We encourage you to copy this issue in its entirety and share it with your friends and coworkers. Copyright (C) 2000, ITrain - International Association of Information Technology Trainers, Ltd., All Rights Reserved RCSE-List facilities provided by Model Airplane News. Send "subscribe" and "unsubscribe" requests to [EMAIL PROTECTED]
