Worm blocks anti-virus sites

[InfoSec News <isn () C4I ORG>]

http://www.telekomnet.com/xml_news/story.asp?id=xml_news_data/11-22-00_worm_antivirussites.xml

Nov. 22, 2000

The software virus known as W95/MTX now can block users from going to
certain anti-virus software vendor Web sites, thus preventing access
to updates.

Command Software Systems, a security provider, said the virus was
spreading quickly.

W95/MTX is a virus, worm, backdoor access Trojan that arrives through
e-mail as an attachment, and has a variety of decoy file names. Once
launched, it can wipe out files and be difficult to remove. Some of
the file names being reported to entice the user to open the virus
program include README.TXT.pif, I_wanna_see_YOU.TXT.pif,
MATRiX_Screen_Saver.SCR, LOVE_LETTER_FOR_YOU.TXT.pif,
NEW_playboy_Screen_saver.SCR, BILL_GATES_PIECE.JPG.pif,
NEW_NAPSTER_site.TXT.pif., and I_am_sorry.DOC.pif

Command Software Systems is offering ISPs, ASPs and Web portals, free
hosting and deployment of its "Command-On-Demand" service for 30 days.
This is a fully portable, online, instant scanning and disinfection
service that will allow users to come to receive a quick scan. Call
800/423-9147, ext. 4195.

"We urge the public to be very careful during the holiday about
opening files sent via e-mail, and not to open any file that the user
is not expecting," said Mark Segedi, director of marketing for Command
Software Systems. "We also urge users to make sure the anti-virus
software program they are using is up to date."

Command Software is based in Jupiter, Fla., and has been providing
security protection to government, academic and corporations since
1984. The company provides anti-virus technology and is experienced in
behavior blocking.

ISN is hosted by SecurityFocus.com
---
To unsubscribe email LISTSERV () SecurityFocus com with a message body of
"SIGNOFF ISN".