Hi All this man posted to another list I belong to . He seems to have the facts on this new virus. Hope this saves all of us some grief. Gwen Renshaw Maurer I don't want to start a non-gen thread, but here is the info on the virus mentioned earlier. This is not a hoax. This virus will automatically send itself to other people on your address book. Please use the information and links below to clean you system if you have been infected. PLEASE DO NOT REPLY TO THE WHOLE LIST -- IF YOU HAVE QUESTIONS, E-MAIL ME PERSONALLY. ALSO PLEASE FOLLOW RANDALL'S EARLIER ADVICE AND BACK-UP YOUR FILES TO A SAFE-PLACE. I back-up to a zip disk and keep stored in a fire safe. Virus Name: W32.Video.25600.Worm Virus Type: Worm General Risk: High Microsoft Risk: High Summary: This virus is sent as an executable attachment in e-mail. The e-mail has no subject line and the message body is Here's a digital video for you . When the attachment called "Video.exe" is executed the virus appears to automatically send itself to an unknown number of recipients. The size of this attached program file is 25,600 bytes. Recommended Actions: Microsoft recommends that you take the following precautions: Never open executable attachments (files ending in .exe, .com, .bat, .shs, .vbs, etc...) If an attachment is received unexpectedly, even from a person you trust, ask the sender before opening Ensure that you are running anti-virus software with the latest signature update Details: What Does The Virus Do? Payload - The worm attempts to delete the following files after the 16th of every month: c:\WinNt\System\*.c* c:\WinNt4\System\*.c* c:\Windows\System\*.c* c:\WinNt\System\*.o* c:\WinNt4\System\*.o* c:\Windows\System\*.o* c:\WinNt\*.i* c:\WinNt4\*.i* c:\Windows\*.i* How Do You Become Infected? If you have executed the attachment called "Video.exe" then your machine has likely been infected. How Do You Know You Are Infected? An entry will be made to the registry: HKLocalMachine\Software\Microsoft\WindowsNT\CurrentVersion\Windows\Run\Agent 5=C:\ZIP01.EXE How Is The Virus Transmitted? Email attachment or downloaded from the Internet. What Microsoft Operating Systems and Applications Are Affected? All Windows Operation Systems How Prevalent Is This Virus? (as reported by third-party anti-virus vendors) Common For Additional Detailed Information About This Virus: <http://www.cai.com/virusinfo/virusalert.htm#VideoWorm> <http://www.sarc.com/avcenter/venc/data/w32.video.25600.worm.html> <http://vil.nai.com/vil/wm10474.asp> For General Virus Information: ICSA's Anti-Virus Product Developer's Website: <http://www.icsa.net/services/consortia/anti-virus/avpdmembers.shtml> Revisions: December 17, 1999 - Bulletin created Write-Up: MSCERT