W32.NewApt.Worm virus information from Delanet.com

[Shannen Durphey]

I am pretty sure I've got that puppy right here.  Instead of listing
who it was actually from, it had only the GM_ECM email addy.  That was
the first clue.  The the text message "he, your lame client cant read
HTML, haha.
 click attachment to see some stunningly HOT stuff" which is
definitely not standard list content.  The file is "panthr.exe"  and
the subject is "Re: VSS question & project report"

Shannen


Dave Zug wrote:
> 
> I believe I am the only DELANET customer on the list... I am
> presently updating my Norton AV and will notify you all if anything
> comes up or not.
> 
> My ISP scans, and it was definetly from gm_ECM. I never open EXE's
> but some messages ask if I want to open as "regular text" or as
> "HTML" I always choose regular. I admin 45 PC's here at work (for now
> anyway... who knows after jan-1 :-(
> 
> the message was trapped at delanet so its doubtful I have it, you
> should get updates to your virus scan packages before you scan.
> 
> geeze I hope this isnt some marketing ploy arrangement between
> delanet and symantic :-{
> 
> > Date:          Mon, 20 Dec 1999 14:13:26 -0500
> > From:          mswayze at truswood.com (Mike Swayze)
> > To:            gmecm at efi332.eng.ohio-state.edu
> > Subject:       Re: W32.NewApt.Worm virus information from Delanet.com
> > Reply-to:      gmecm at efi332.eng.ohio-state.edu
> 
> > I hadn't seen the e-mail they talked
> > about and definitely didn't run any exe
> > from e-mail. either way ran virus scan.
> > anybody on the box(list server) to check
> > it?
> > byE
> > Mike S.
> >
> > Pat Ford wrote:
> > >
> > >  Same here. I think the email was sent to gmecm, and just popped out at us.
> > > I checked all the email I got over the weekend and none of it had the virus.
> > > And I'm pretty sure that a w32 virus wouldn't work on QNX.
> > >
> > > Previously, you (Mike Swayze) wrote:
> > > { You must have mass e-mailed this. I'm
> > > { clean.
> > > { byE
> > > { Mike S.
> > > {
> > > { Delanet Administration wrote:
> > > { >
> > > { > Greetings. If you are receiving this email then you have at some point
> > > { > in the past 24 hours sent out an email infected with the W32.NewApt.Worm
> > > { > virus to a customer of Delanet.
> > > { > This virus was discovered on 12/14/99 and more information may be found
> > > { > at http://www.symantec.com/avcenter/venc/data/worm.newapt.html or
> > > { > http://vil.mcafee.com/vil/wm10475.asp.
> > > { > It is advised that you download the newest virus definition files and
> > > { > scan your pc, or download the 30 day trial virus scanner from Norton or
> > > { > Mcaffee (at url above) to ensure you do not continue the spread of this
> > > { > virus over the internet. The customers at Delanet which you have sent
> > > { > this virus to have been notified of the virus and their possible
> > > { > infection. Please take the time to make sure all those you normally
> > > { > communicate with are likewise notified.
> > > { >
> > > { > Regards,
> > > { >
> > > { > --
> > > { > Stephen Comoletti
> > > { > Systems Administrator
> > > { > Delanet, Inc.  http://www.delanet.com
> > > { > ph: (302) 326-5800 fax: (302) 326-5802
> > >
> > > --
> > > Pat Ford                           email: pford at qnx.com
> > > QNX Software Systems, Ltd.           WWW: http://www.qnx.com
> > > (613) 591-0931      (voice)         mail: 175 Terence Matthews
> > > (613) 591-3579      (fax)                 Kanata, Ontario, Canada K2M 1W8
> >
> >
> ~~~
> Dave Z. www.delanet.com/~tgp