[esa-l] Email trojans/viruses alert

[John D. Hardin]

Please add "SUPPL.DOC" and "Y2KCOUNT.EXE" to your poisoned files list.

--
 John Hardin KA7OHZ                               jhardin at wolfenet.com
 pgpk -a finger://gonzo.wolfenet.com/jhardin    PGP key ID: 0x41EA94F5
 PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
-----------------------------------------------------------------------
  Mary had a little key
  she kept it in escrow
  and everything that Mary sent
  the feds were sure to know         -- Andy Starritt, in sci.crypt
-----------------------------------------------------------------------
   41 days until Halloween and Daylight Savings Time ends

---------- Forwarded message [abridged] ----------
Date: Sun, 19 Sep 1999 13:51:05 -0700
From: Jim Reavis <jreavis at securityportal.com>
To: SECURITYPORTAL-L at LISTSERV.SECURITYPORTAL.COM
Subject: SecurityPortal.com -- September 20, 1999

******* Top News *******
September 20, 1999
Welcome to SecurityPortal.com -  The focal point for security on the Net.

Here are some recent postings in our top news
<http://www.securityportal.com/framesettopnews.html> :

2.      NAI Labs: W97M/Suppl Virus Alert
<http://vil.nai.com/vil/vm10361.asp>  - This is Word97 document with a class
module macro having an appended internet worm binary file. When received in
the mail, attachment is called SUPPL.DOC, seeks to destroy data files in a
manner similar to ExploreZip (Sep 20)

3.      TechWeb: Beware Of Virus-Riddled Y2K E-Mail
<http://www.techweb.com/wire/story/TWB19990915S0018> - Antivirus experts are
urging computer users not to open a year 2000 countdown program that comes
in the form of an e-mail sent by Microsoft on Tuesday  (Sep 16)

{snip}

SecurityPortal.com - The focal point for security on the Net
jreavis at SecurityPortal.com <mailto:jreavis at SecurityPortal.com>


--------------------------------------------------------------------------
To remove yourself from the Email-Security-Announce list, send a message
with the subject of "unsubscribe" to esa-l-request at spconnect.com.