[CivilSoc] McAfee Virus Warning - W32/APost@mm (fwd)

Center for Civil Society International [email protected]
Thu, 6 Sep 2001 09:40:28 -0700 (PDT)


This virus warning comes from Dennis McConnell, who runs the CEEMAN
list.
From: "Dennis McConnell, Maine Business School" <[email protected]>
To: [email protected]
Subject: McAfee Virus Warning - W32/APost@mm
My virus service (McAfee.com) has sent this virus warning. Perhaps it
will be helpful to some list members.
-----------------------------------------------------------------------------------------
W32/APost@mm ("APost" or "New Backdoor") worm has been spreading
over the past 24 hours through the Microsoft Outlook email program.
This is a MEDIUM ON WATCH worm.
The infected email can come from addresses that you recognize and
may contain the following information:
Subject: As per your request!
Body:    Please find attached file for your review.
             I look forward to hear from you again very soon.
             Thank you.
Attachment: README.EXE
Running the attachment causes the worm to copy itself to the Windows
directory and send a copy of itself to every entry in the user's Microsoft
Outlook
Address Book. It will then display a small dialog box titled "Urgent!".
This dialog box contains one single large button labeled "Open".
If this button is pressed then the worm sends out further copies of itself,
displays an error message box with the title "WinZip SelfExtractor:
Warning" and then terminates.