My wife received the message carrying this worm from a client it had indeed
automatically propagated itself via his address book as Phillip describes.
Luckily, Macs
are immune to this Windoze stuff!
Gary McCormick
San Jose, CA
All Macintosh, All The Time
*****************************************
"Hall, Phillip" wrote:
> Listers - we are getting hit by this new virus - watch out for it.
>
> Happy top down Roadstering
> Phil
> SEROC
>
> -----Original Message-----
> From: MSFC Activity Notice
> Sent: Wednesday, December 06, 2000 10:56 AM
> To: MSFC Activity Notice
> Subject: Information Technology Awareness Notification Hostile
> Computer Code: Shockwave/W32.Prolin Worm
>
> Information Technology Awareness Notification
> Hostile Computer Code: Shockwave/W32.Prolin Worm
>
> The Shockwave Worm, also known as the W32.Prolin Worm,TROJ_SHOCKWAVE.A,
> CREATIVE, TROJ_PROLIN.A, W32/ProLin@MM <mailto:W32/ProLin@MM> ,
> I-Worm.Creative, Prolin-Shockwave,
> and the TROJ_SHOCKWAVE Worm, is an e-mail worm which is propagated by the
> Microsoft Outlook application. The worm itself is coded in Visual Basic 6
> and compiled
> as an executable named CREATIVE.EXE. It carries the icon of a Shockwave
> Media Player application; however, it is not.
>
> The worm may be received via email in the following form: SUBJECT: "A great
> Shockwave flash movie". BODY: "Check out this new flash movie that I
> downloaded just now... It's Great.
> Bye". ATTACHMENT: CREATIVE.EXE. If you run CREATIVE.EXE, it finds and
> alters all .JPG and .ZIP files on your system and forwards a copy of itself
> to everyone in your email address book.
>
> Current MSFC network defenses are in place against this email message and
> attachment. If you discover this email on your computer desktop, please do
> not open or run the attachment. Contact your OAO/ODIN computer support
> specialist, or the ODIN Help Desk at 544-HELP (Option 7), for assistance.
|