W32.NewApt.Worm virus information from Delanet.com

[Pat Ford]

 If anyone has it PLEASE send it to me, I have a zoo that I use to learn
about virii from

Previously, you (Programmer) wrote:
{ What date was that ??? If it was a blanket send--didn't we all get it ?
{ Lyndon.
{ -----Original Message-----
{ From: Shannen Durphey <shannen at grolen.com>
{ To: gmecm at efi332.eng.ohio-state.edu <gmecm at efi332.eng.ohio-state.edu>
{ Date: December 20, 1999 10:34 PM
{ Subject: Re: W32.NewApt.Worm virus information from Delanet.com
{ 
{ 
{ >I am pretty sure I've got that puppy right here.  Instead of listing
{ >who it was actually from, it had only the GM_ECM email addy.  That was
{ >the first clue.  The the text message "he, your lame client cant read
{ >HTML, haha.
{ > click attachment to see some stunningly HOT stuff" which is
{ >definitely not standard list content.  The file is "panthr.exe"  and
{ >the subject is "Re: VSS question & project report"
{ >
{ >Shannen
{ >
{ >
{ >Dave Zug wrote:
{ >>
{ >> I believe I am the only DELANET customer on the list... I am
{ >> presently updating my Norton AV and will notify you all if anything
{ >> comes up or not.
{ >>
{ >> My ISP scans, and it was definetly from gm_ECM. I never open EXE's
{ >> but some messages ask if I want to open as "regular text" or as
{ >> "HTML" I always choose regular. I admin 45 PC's here at work (for now
{ >> anyway... who knows after jan-1 :-(
{ >>
{ >> the message was trapped at delanet so its doubtful I have it, you
{ >> should get updates to your virus scan packages before you scan.
{ >>
{ >> geeze I hope this isnt some marketing ploy arrangement between
{ >> delanet and symantic :-{
{ >>
{ >> > Date:          Mon, 20 Dec 1999 14:13:26 -0500
{ >> > From:          mswayze at truswood.com (Mike Swayze)
{ >> > To:            gmecm at efi332.eng.ohio-state.edu
{ >> > Subject:       Re: W32.NewApt.Worm virus information from Delanet.com
{ >> > Reply-to:      gmecm at efi332.eng.ohio-state.edu
{ >>
{ >> > I hadn't seen the e-mail they talked
{ >> > about and definitely didn't run any exe
{ >> > from e-mail. either way ran virus scan.
{ >> > anybody on the box(list server) to check
{ >> > it?
{ >> > byE
{ >> > Mike S.
{ >> >
{ >> > Pat Ford wrote:
{ >> > >
{ >> > >  Same here. I think the email was sent to gmecm, and just popped out
{ at us.
{ >> > > I checked all the email I got over the weekend and none of it had the
{ virus.
{ >> > > And I'm pretty sure that a w32 virus wouldn't work on QNX.
{ >> > >
{ >> > > Previously, you (Mike Swayze) wrote:
{ >> > > { You must have mass e-mailed this. I'm
{ >> > > { clean.
{ >> > > { byE
{ >> > > { Mike S.
{ >> > > {
{ >> > > { Delanet Administration wrote:
{ >> > > { >
{ >> > > { > Greetings. If you are receiving this email then you have at some
{ point
{ >> > > { > in the past 24 hours sent out an email infected with the
{ W32.NewApt.Worm
{ >> > > { > virus to a customer of Delanet.
{ >> > > { > This virus was discovered on 12/14/99 and more information may be
{ found
{ >> > > { > at http://www.symantec.com/avcenter/venc/data/worm.newapt.html or
{ >> > > { > http://vil.mcafee.com/vil/wm10475.asp.
{ >> > > { > It is advised that you download the newest virus definition files
{ and
{ >> > > { > scan your pc, or download the 30 day trial virus scanner from
{ Norton or
{ >> > > { > Mcaffee (at url above) to ensure you do not continue the spread
{ of this
{ >> > > { > virus over the internet. The customers at Delanet which you have
{ sent
{ >> > > { > this virus to have been notified of the virus and their possible
{ >> > > { > infection. Please take the time to make sure all those you
{ normally
{ >> > > { > communicate with are likewise notified.
{ >> > > { >
{ >> > > { > Regards,
{ >> > > { >
{ >> > > { > --
{ >> > > { > Stephen Comoletti
{ >> > > { > Systems Administrator
{ >> > > { > Delanet, Inc.  http://www.delanet.com
{ >> > > { > ph: (302) 326-5800 fax: (302) 326-5802
{ >> > >
{ >> > > --
{ >> > > Pat Ford                           email: pford at qnx.com
{ >> > > QNX Software Systems, Ltd.           WWW: http://www.qnx.com
{ >> > > (613) 591-0931      (voice)         mail: 175 Terence Matthews
{ >> > > (613) 591-3579      (fax)                 Kanata, Ontario, Canada K2M
{ 1W8
{ >> >
{ >> >
{ >> ~~~
{ >> Dave Z. www.delanet.com/~tgp
{ >
{ 

--
Pat Ford                           email: pford at qnx.com
QNX Software Systems, Ltd.           WWW: http://www.qnx.com
(613) 591-0931      (voice)         mail: 175 Terence Matthews          
(613) 591-3579      (fax)                 Kanata, Ontario, Canada K2M 1W8