[esa-l] Email Worm / Macro Virus notice

[John D. Hardin]

Please add "STORY.DOC" to your poisoned executables list.

NB: Filenames in the poisoned executables list are not case-sensitive.

--
 John Hardin KA7OHZ                               jhardin at wolfenet.com
 pgpk -a finger://gonzo.wolfenet.com/jhardin    PGP key ID: 0x41EA94F5
 PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
-----------------------------------------------------------------------
  Mary had a little key
  she kept it in escrow
  and everything that Mary sent
  the feds were sure to know         -- Andy Starritt, in sci.crypt
-----------------------------------------------------------------------
   34 days until Halloween and Daylight Savings Time ends

---------- Forwarded message [ABDRIDGED] ----------
Date: Sun, 26 Sep 1999 10:16:01 -0700
From: Jim Reavis <jreavis at securityportal.com>
To: SECURITYPORTAL-L at LISTSERV.SECURITYPORTAL.COM
Subject: SecurityPortal.com -- September 27, 1999

******* Top News *******
September 27, 1999
Welcome to SecurityPortal.com -  The focal point for security on the Net.

Here are some recent postings in our top news
<http://www.securityportal.com/framesettopnews.html> :

{snip}

12.     Trend Micro Virus Alert: W2KM_IRCJACK.A Word Macro Virus
<http://www.antivirus.com/vinfo/security/sa092399.htm>  - The W2KM_IRCJACK.A
is a macro virus that infects Microsoft Word 97 and 2000 templates and
documents. This virus is already found in the wild and has spread as an
infected document file Story.doc, through the MIRC channel. This virus
disables the menu Tools/Macro, Tools/Customize, View/Toolbars and
View/Status Bar in infected documents (Sep 24)

{snip}

Jim Reavis
SecurityPortal.com - The focal point for security on the Net
jreavis at SecurityPortal.com <mailto:jreavis at SecurityPortal.com>



--------------------------------------------------------------------------
To remove yourself from the Email-Security-Announce list, send a message
with the subject of "unsubscribe" to esa-l-request at spconnect.com.