Re: Worm info

[Chuck Cooper <ccc@pp.pdx.edu>]

The worm was distributed to the list as uuencoded (Base 64) text but not as an

attachment, at least that's my mail reader interpreted it. It would not be a

threat in this form unless you explicitly copied the text and decoded it. You

should remove the offending code from the archive though.



Michael Stabin wrote:



> > W32/MyParty-A is a Windows 32 email-aware worm which arrives as an email

> with the

> > following characteristics:

>

> Yes, Norton also gives a description and a fix at

> http://securityresponse.symantec.com/avcenter/venc/data/w32.myparty.b@mm.htm

> l

>

> It appears to be a high distribution, low damage worm. I am still checking

> here on what did or did not go out with Radsafe messages. Although the

> original offender was removed from the list, his/her attempted distribution

> to the list may not have been malicious, as this is a worm that

> automatically sends itself through your e-mail directory once you have it.

>

> Mike

>