blackadder
1st Dec 1999, 14:36
W32/ExploreZip.worm.pak is a new, compressed variant of the
original W32/ExploreZip.worm. AVERT has assessed it as a
high-risk threat, approaching outbreak levels! It reproduces
itself by sending replies to incoming email messages, with
itself as an attachment called "zipped_files.exe".
It includes a payload: it will search the user's mapped
drives and overwrite all files of types .c, .cpp, .asm,
.doc, .xls, .ppt. to zero Kb.
IMPORTANT - If you receive an email with the message
"I received your email and I shall send you a reply ASAP.
Till then, take a look at the attached zipped docs.",
DELETE IT IMMEDIATELY! It will have an attachment called
"zipped_files.exe"; DO NOT DOUBLE-CLICK OR RUN THIS
ATTACHMENT! If you do, it will infect your system!
VirusScan 4.0.25 and above requires the EXTRA.DAT
(W32exp-4.zip) to detect and remove W32/ExploreZip.worm.pak.
VirusScan 3.x cannot detect W32/ExploreZip.worm.pak because
it arrives in a compressed form. Users of VirusScan 3.x
should upgrade to the latest version.
Note: If you are using McAfee Clinic [Active Shield (TM)],
please click here to get the update.
-> http://clinic.mcafee.com/clinic/virusscan/activeshield
-- McAfee.com
original W32/ExploreZip.worm. AVERT has assessed it as a
high-risk threat, approaching outbreak levels! It reproduces
itself by sending replies to incoming email messages, with
itself as an attachment called "zipped_files.exe".
It includes a payload: it will search the user's mapped
drives and overwrite all files of types .c, .cpp, .asm,
.doc, .xls, .ppt. to zero Kb.
IMPORTANT - If you receive an email with the message
"I received your email and I shall send you a reply ASAP.
Till then, take a look at the attached zipped docs.",
DELETE IT IMMEDIATELY! It will have an attachment called
"zipped_files.exe"; DO NOT DOUBLE-CLICK OR RUN THIS
ATTACHMENT! If you do, it will infect your system!
VirusScan 4.0.25 and above requires the EXTRA.DAT
(W32exp-4.zip) to detect and remove W32/ExploreZip.worm.pak.
VirusScan 3.x cannot detect W32/ExploreZip.worm.pak because
it arrives in a compressed form. Users of VirusScan 3.x
should upgrade to the latest version.
Note: If you are using McAfee Clinic [Active Shield (TM)],
please click here to get the update.
-> http://clinic.mcafee.com/clinic/virusscan/activeshield
-- McAfee.com