W32.NewApt.Worm virus information from Delanet.com

[Programmer]

What date was that ??? If it was a blanket send--didn't we all get it ?
Lyndon.
-----Original Message-----
From: Shannen Durphey <shannen at grolen.com>
To: gmecm at efi332.eng.ohio-state.edu <gmecm at efi332.eng.ohio-state.edu>
Date: December 20, 1999 10:34 PM
Subject: Re: W32.NewApt.Worm virus information from Delanet.com


>I am pretty sure I've got that puppy right here.  Instead of listing
>who it was actually from, it had only the GM_ECM email addy.  That was
>the first clue.  The the text message "he, your lame client cant read
>HTML, haha.
> click attachment to see some stunningly HOT stuff" which is
>definitely not standard list content.  The file is "panthr.exe"  and
>the subject is "Re: VSS question & project report"
>
>Shannen
>
>
>Dave Zug wrote:
>>
>> I believe I am the only DELANET customer on the list... I am
>> presently updating my Norton AV and will notify you all if anything
>> comes up or not.
>>
>> My ISP scans, and it was definetly from gm_ECM. I never open EXE's
>> but some messages ask if I want to open as "regular text" or as
>> "HTML" I always choose regular. I admin 45 PC's here at work (for now
>> anyway... who knows after jan-1 :-(
>>
>> the message was trapped at delanet so its doubtful I have it, you
>> should get updates to your virus scan packages before you scan.
>>
>> geeze I hope this isnt some marketing ploy arrangement between
>> delanet and symantic :-{
>>
>> > Date:          Mon, 20 Dec 1999 14:13:26 -0500
>> > From:          mswayze at truswood.com (Mike Swayze)
>> > To:            gmecm at efi332.eng.ohio-state.edu
>> > Subject:       Re: W32.NewApt.Worm virus information from Delanet.com
>> > Reply-to:      gmecm at efi332.eng.ohio-state.edu
>>
>> > I hadn't seen the e-mail they talked
>> > about and definitely didn't run any exe
>> > from e-mail. either way ran virus scan.
>> > anybody on the box(list server) to check
>> > it?
>> > byE
>> > Mike S.
>> >
>> > Pat Ford wrote:
>> > >
>> > >  Same here. I think the email was sent to gmecm, and just popped out
at us.
>> > > I checked all the email I got over the weekend and none of it had the
virus.
>> > > And I'm pretty sure that a w32 virus wouldn't work on QNX.
>> > >
>> > > Previously, you (Mike Swayze) wrote:
>> > > { You must have mass e-mailed this. I'm
>> > > { clean.
>> > > { byE
>> > > { Mike S.
>> > > {
>> > > { Delanet Administration wrote:
>> > > { >
>> > > { > Greetings. If you are receiving this email then you have at some
point
>> > > { > in the past 24 hours sent out an email infected with the
W32.NewApt.Worm
>> > > { > virus to a customer of Delanet.
>> > > { > This virus was discovered on 12/14/99 and more information may be
found
>> > > { > at http://www.symantec.com/avcenter/venc/data/worm.newapt.html or
>> > > { > http://vil.mcafee.com/vil/wm10475.asp.
>> > > { > It is advised that you download the newest virus definition files
and
>> > > { > scan your pc, or download the 30 day trial virus scanner from
Norton or
>> > > { > Mcaffee (at url above) to ensure you do not continue the spread
of this
>> > > { > virus over the internet. The customers at Delanet which you have
sent
>> > > { > this virus to have been notified of the virus and their possible
>> > > { > infection. Please take the time to make sure all those you
normally
>> > > { > communicate with are likewise notified.
>> > > { >
>> > > { > Regards,
>> > > { >
>> > > { > --
>> > > { > Stephen Comoletti
>> > > { > Systems Administrator
>> > > { > Delanet, Inc.  http://www.delanet.com
>> > > { > ph: (302) 326-5800 fax: (302) 326-5802
>> > >
>> > > --
>> > > Pat Ford                           email: pford at qnx.com
>> > > QNX Software Systems, Ltd.           WWW: http://www.qnx.com
>> > > (613) 591-0931      (voice)         mail: 175 Terence Matthews
>> > > (613) 591-3579      (fax)                 Kanata, Ontario, Canada K2M
1W8
>> >
>> >
>> ~~~
>> Dave Z. www.delanet.com/~tgp
>