New Virus: W32/APost at MM

Martin Spellman mspellman at
Wed Sep 5 05:33:06 MDT 2001

I received this today from McAfee and am posting it knowing the problems
many here have with such things.

Martin Spellman
W32/APost at mm ("APost" or "New Backdoor") worm has been spreading over the
past 24 hours through the Microsoft Outlook email program. This is a MEDIUM
ON WATCH worm. The infected email can come from addresses that you recognize
and may contain the following information:

Subject: As per your request!
Body: Please find attached file for your review. I look forward to hear from
you again very soon. Thank you.
Attachment: README.EXE

Running the attachment causes the worm to copy itself to the Windows
directory and send a copy of itself to every entry in the user's Microsoft
Outlook Address Book. It will then display a small dialog box titled
"Urgent!". This dialog box contains one single large button labeled "Open".
If this button is pressed then the worm sends out further copies of itself,
displays an error message box with the title "WinZip SelfExtractor: Warning"
and then terminates.

More information about the Marxism mailing list