--part1_0.770c51fb.258f1f16_boundary Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit In a message dated 12/19/99 10:28:38 PM Central Standard Time, [email protected] writes: << Subj: Re: Fwd: [Texian-Web] Virus Warnings Date: 12/19/99 10:28:38 PM Central Standard Time From: [email protected] (William McMahon) To: [email protected] Gene, I got hit with the W32,NewApt.Worm. Thanks for the warning. (I was already suspecious because I could not delete them by ordinary means.) See below: Bill --------------------------------- Hi Guys, I have just deleted three virus attachments from my C drive. Someone sent them to me and (These viruses send themselves to others, in an address book, without their knowledge). I downloaded Norton antivirus software and deleted the following: C:\CONNECT\HOG.EXE These are "W32.NewApt.Worm" viruses C:\CONNECT\BABY.EXE C:\CONNECT\BBOY.EXE These came as attachments and they could not be deleted by ordinary means. (The "CONNECT" in the file names refer to my ISP and will be different in the file names in your "puter".) I got the notice below today from a friend and note that this phrase WAS IN THE MESSAGE: "he, your lame client cant read HTML, haha. click attachment to see some stunningly HOT stuff" is included in the notice and this phrase was in the body of all the e-mails I received from my grandsons address. So I suggest you see check into your puters. Norton (Symantec) and McAfee both have cures that will delete these viruses-note that these are new and you will need the latest upgrades. So if you received anything like these from "my address", check your attachment file for "C:\YOURISP\HOG.EXE" and etc. Do not open, but attempt to delete-it that doesn't work you need the latest anit-virus program to do the job. Good Luck, Bill >> --part1_0.770c51fb.258f1f16_boundary Content-Type: message/rfc822 Content-Disposition: inline Return-Path: <[email protected]> Received: from rly-yd05.mx.aol.com (rly-yd05.mail.aol.com [172.18.150.5]) by air-yd03.mail.aol.com (v67.6) with ESMTP; Sun, 19 Dec 1999 23:28:38 -0500 Received: from neptune.ConnectI.com (neptune.connecti.com [206.81.246.3]) by rly-yd05.mx.aol.com (v67.6) with ESMTP; Sun, 19 Dec 1999 23:28:21 1900 Received: from Default (sa2-123.ConnectI.com [206.81.244.123]) by neptune.ConnectI.com (8.9.3/8.9.3) with SMTP id WAA16611 for <[email protected]>; Sun, 19 Dec 1999 22:41:50 -0600 (CST) Date: Sun, 19 Dec 1999 22:41:50 -0600 (CST) Message-Id: <[email protected]> X-Sender: [email protected] X-Mailer: Windows Eudora Light Version 1.5.2 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" To: [email protected] From: William McMahon <[email protected]> Subject: Re: Fwd: [Texian-Web] Virus Warnings Content-Transfer-Encoding: 7bit Gene, I got hit with the W32,NewApt.Worm. Thanks for the warning. (I was already suspecious because I could not delete them by ordinary means.) See below: Bill - ------------------------------- Hi Guys, I have just deleted three virus attachments from my C drive. Someone sent them to me and (These viruses send themselves to others, in an address book, without their knowledge). I downloaded Norton antivirus software and deleted the following: C:\CONNECT\HOG.EXE These are "W32.NewApt.Worm" viruses C:\CONNECT\BABY.EXE C:\CONNECT\BBOY.EXE These came as attachments and they could not be deleted by ordinary means. (The "CONNECT" in the file names refer to my ISP and will be different in the file names in your "puter".) I got the notice below today from a friend and note that this phrase WAS IN THE MESSAGE: "he, your lame client cant read HTML, haha. click attachment to see some stunningly HOT stuff" is included in the notice and this phrase was in the body of all the e-mails I received from my grandsons address. So I suggest you see check into your puters. Norton (Symantec) and McAfee both have cures that will delete these viruses-note that these are new and you will need the latest upgrades. So if you received anything like these from "my address", check your attachment file for "C:\YOURISP\HOG.EXE" and etc. Do not open, but attempt to delete-it that doesn't work you need the latest anit-virus program to do the job. Good Luck, Bill -------------Warning I received today:--------------- >Important Notice >We have just learned that an email worm has been found circulating the web >referencing MessageMates.com. This worm file is in no way connected with >MessageMates.com. >If you have received an email with a message that reads: >he, your lame client cant read HTML, haha. >click attachment to see some stunningly HOT stuff >or >http://stuart.messagemates.com/index.html >Hypercool Happy Year 2000 funny programs and animations.... >We attached our recent animation from this site in our mail! Check it out! >then you have been passed the Worm in question. >It is a worm that was created and set loose by someone who's trying to spoil >all of our Holiday fun. Do not run the attachment included in the email and >please delete the email message immediately! >What we know about this Worm so far: >1. Symantec has named this worm: W32.NewApt.Worm. >2. Once opened/launched the worm will email itself out and reply to messages >in your mailbox. >3. The file being passed as an attachment is approximately 68K. >4. The subject line of this message will vary and may appear to be a reply >to something you've previously sent. >5. The attachment is no way related to any MessageMates.com products. >What you can do: >1. Read the details of this worm virus by checking with Symantec at: >www.symantec.com >2. If you receive a suspect email with an .exe attachment from someone, >first email them back and confirm that they've intended to send you a >MessageMate. >What we can tell you about MessageMates.com: >1. Our millions of loyal users are our number one priority and we are fully >committed to providing software programs that are safe and fun. >2. We never send out any unsolicited emails. >3. We never send out attachments. >4. Our files are 100% safe when downloaded directly from our web site. >Please know that we at MessageMates.com have worked tirelessly to earn your >trust and respect. We take great pride in our products and only want our >users to have a positive and entertaining experience with them. >Thank you for taking the time to read this very important notice. If you >have any questions or comments, please email me directly at >[email protected] >Chris Heitmann >Chief Operating Officer --part1_0.770c51fb.258f1f16_boundary--