28 January 2002 Security Advisory There is a new high incidence virus out there called W32.Myparty@mm Symantec gave it a category 3, which I why I am sending you this message today. It's a mass mailing virus: Subject: new photos from my party! Message: Hello! My party... It was absolutely amazing! I have attached my web page with new photos! If you can please make color prints of my photos. Thanks! Attachment: www.myparty.yahoo.com The worm sends email to all contacts in your Windows address book, and to email addresses that if finds in the Outlook Express Inboxes and folders. In addition, the worm sends a message to the author so that the author can track the worm. On NT/2000/XP systems, the worm drops a backdoor Trojan that allows a hacker to control your system. Finally, the file name of the worm is Access., it may launch your Web browser to http:/ /www.disney.com. Watch out for emails resembling the one above, even if it comes from someone you know. Update your virus signatures and scan your drive. Your privacy is important to me. No one on this list can see your email address. If you want to be removed from this list, just hit the reply button and include the word "remove" at the top of the message. Fredo Martin www.workingarts.com Workingarts security advisories are archived at www.workingarts.com/infosecarchives.html