W32/Pretty.worm.unp - Risk Assessment Upgraded Dear McAfee.com Dispatch Subscriber: W32/Pretty.Worm.unp, which AVERT upgraded to Medium--On Watch one week ago, has continued to spread rapidly. As a result, AVERT has now upgraded its risk assessment to HIGH Risk. If you are a new subscriber to McAfee.com Dispatch, or if you would like to review the original W32/Pretty.Worm.unp Virus Alert, please click here <http://dispatch.mcafee.com/dispatches/pretty> . VIRUS ALERT - W32/Pretty.worm.unp Dear McAfee.com Dispatch Subscriber: W32/Pretty.worm.unp is the unpacked edition of the original "W32/Pretty.worm" Internet worm. AVERT has upgraded its risk assessment from low to MEDIUM--ON WATCH, due to a significant increase in prevalence. It infects Windows 95/98/NT systems. W32/Pretty.worm.unp arrives via email from affected users who have also run this Internet worm. It appears as an attachment titled "Pretty Park.exe", with the icon of a character from the animated television series "South Park". This worm will try to email itself automatically every 30 minutes to all email addresses listed in the Internet address book. It will also attempt to connect to an IRC server and join a pre-determined IRC channel in such a way that the worm's author could use the IRC connection to retrieve such information as the computer name, registered owner, registered organization, system root path, and Dial Up Networking username and passwords. Bob K http://www.mcafee.com/viruses/prettyworm/