[log in to unmask] wrote: > June 19, 2000 > _____________________________ > > In this issue: > > 1.VBS.Stages.A is a new virus > 2.Subscribing and unsubscribing > 3.Disclaimer > > _____________________________ > > NOTE: > > This is an outgoing email address. Please do not reply to this email > message. If you require assistance installing, configuring, or > troubleshooting a Symantec product, or you have a question for > Customer Service, please visit the Symantec Service & Support Web > site at the following address: > > http://www.symantec.com/techsupp/ > > Select your product and version and click Go. > > To see an HTML version of this newsletter, please visit the following > Web site: > > http://www.symantec.com/techsupp/vURL.cgi/navarc > > _____________________________ > > 1.VBS.Stages.A is a new worm. > > A new virus named VBS.Stages.A was discovered over the weekend. The > virus attempts to email a copy of itself to everyone in your > Microsoft Outlook address book. It also attempts to spread itself > using IRC, mIRC, and PIRCH. > > The email contains an attachment named LIFE_STAGES.TXT.SHS. The > subject line of the email is > randomly generated. There are 12 possibilities for the subject line > of the email, which will include one of the following phrases: > > * Life Stages > * Funny > * Jokes > > Once LIFE_STAGES.TXT.SHS is executed, a text file will be opened in > Notepad displaying the male and female stages of life. A script is > executed in the background, which makes some changes to your system. > The worm creates several files in the \WINDOWS\SYSTEM\ folder: > SCANREG.VBS, VBASET.OLB, and MSINFO16.TLB. The worm modifies the > registry to run the worm on startup. A randomly named file is added > to the root directory of all mapped drives, the \My Documents folder, > and the \Windows\Start Menu\Programs folder. > > If you receive an email that matches this description, please delete > it immediately. > > For complete information regarding this virus, please point your > browser to: > > http://www.symantec.com/techsupp/vURL.cgi/nav47 > > To be protected against this virus, be sure to update your virus > definitions through LiveUpdate or the Virus Definition Update > Installer. If you are unsure as to how to update your virus > definitions, please point your browser to one of the following > Internet locations: > > How to Run LiveUpdate > > http://www.symantec.com/techsupp/vURL.cgi/nav48 > > How to update virus definition files using the Virus Definition > Update Installer > > http://www.symantec.com/techsupp/vURL.cgi/nav49 > > _____________________________ > > 2.Subscribing and unsubscribing > > If you would like to subscribe to other Symantec newsletters, please > visit the following Web site and follow the appropriate instructions: > > http://www.symantec.com/techsupp/bulletin/index.html > > If you no longer want to receive this newsletter, let us know by > following these steps: > > 1.Create a new email addressed to: > > [log in to unmask] > > 2.In the Subject line of your email software, type the following: > > UNSUBSCRIBE > > 3.In the body of the message, type the following: > > SIGNOFF NAV-TECHINFO-L > > 4.Send the message. > > If you would like to unsubscribe from other Symantec newsletters, > please visit the following Web site and follow the appropriate > instructions: > > http://www.symantec.com/techsupp/bulletin/index.html > > _____________________________ > > 3.Disclaimer > > THIS DOCUMENT IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY. > > This message contains Symantec Corporation's current view of the > topics discussed as of the date of this document. The information > contained in this message is provided "as is" without warranty of any > kind, either expressed or implied, including but not limited to the > implied warranties of merchantability, fitness for a particular > purpose, and freedom from infringement. The user assumes the entire > risk as to the accuracy and the use of this document. This document > may not be distributed for profit. > > Symantec and the Symantec logo are U.S. registered trademarks of > Symantec Corporation. LiveAdvisor is a trademark of Symantec > Corporation. Other brands and products are trademarks of their > respective holder(s). > > (c) Copyright 1999-2000 Symantec Corporation. All rights reserved. > Materials may not be published in other documents without the FYI - this just came in Sylvia