May, 22, 2002 Security Advisory Hi everyone! I am getting many emails and phone calls today about multiple worm attacks: from a new one, discovered yesterday, that goes after SQL databases, SQLSpider, which goes after Microsoft SQL databases that have no administrator password - to older viruses such as W32.Magistr.39921@mm (which appeared in September 2001) and many variants of Klez – for which I issued a warning a month ago (April 23, 2002 Security Advisory). If you have Anti Virus software installed on your computer, you should run your signature update engine as soon as you get this message. Antivirus viruses are proliferating: they try to disable your installed antivirus protection. If you keep your signatures updated, you are probably safe, but if you don’t, here is a way to have your machine remotely scanned for all currently known viruses. Exit all applications, launch and point your browser to the Trend Micro site at http://housecall.antivirus.com, install the required Java applet and run a full machine scan (you can scan without registering). You may have a dormant worm in your email. Let me know if you like this service. The scan will only tell you that your machine is infected, it may remove some of the problems and may ask you to manually delete files. However, it will NOT protect you from further infections. I just heard of a protected computer with over 450 infected files, and that computer had antivirus software installed, but the signatures had not been updated for a while... * To ensure your privacy, your address is not visible to the recipients of this message. * If you would like to be removed from this list, please reply to this email * with "remove" in the body of the email. Have a safe computing experience and don't forget to back up your files! Fredo http://www.workingarts.com/infosecarchives