Fw: Norton AntiVirus SupportNow! VIRUS NOTIFICATION!

[james () IMAJES CO UK (James Cox)]

The newest form seems to be making it's rounds.  Be particularly careful
with IRC clients (mIRC , Pirch) and of course, Outlook, again ;)

imajes99

----- Original Message -----
From: <es () SYMANTEC COM>
To: <NAV-TECHINFO-L () lserver symantec com>
Sent: Tuesday, June 20, 2000 7:29 AM
Subject: Norton AntiVirus SupportNow! VIRUS NOTIFICATION!

> June 19, 2000
> _____________________________
>
> In this issue:
>
> 1.VBS.Stages.A is a new virus
> 2.Subscribing and unsubscribing
> 3.Disclaimer
>
> _____________________________
>
> NOTE:
>
> This is an outgoing email address. Please do not reply to this email
> message. If you require assistance installing, configuring, or
> troubleshooting a Symantec product, or you have a question for
> Customer Service, please visit the Symantec Service & Support Web
> site at the following address:
>
> http://www.symantec.com/techsupp/
>
> Select your product and version and click Go.
>
> To see an HTML version of this newsletter, please visit the following
> Web site:
>
> http://www.symantec.com/techsupp/vURL.cgi/navarc
>
> _____________________________
>
> 1.VBS.Stages.A is a new worm.
>
> A new virus named VBS.Stages.A was discovered over the weekend.  The
> virus attempts to email a copy of itself to everyone in your
> Microsoft Outlook address book.  It also attempts to spread itself
> using IRC, mIRC, and PIRCH.
>
> The email contains an attachment named LIFE_STAGES.TXT.SHS.  The
> subject line of the email is
> randomly generated. There are 12 possibilities for the subject line
> of the email, which will include one of the following phrases:
>
> * Life Stages
> * Funny
> * Jokes
>
> Once LIFE_STAGES.TXT.SHS is executed, a text file will be opened in
> Notepad displaying the male and female stages of life.  A script is
> executed in the background, which makes some changes to your system.
> The worm creates several files in the \WINDOWS\SYSTEM\ folder:
> SCANREG.VBS, VBASET.OLB, and MSINFO16.TLB.  The worm modifies the
> registry to run the worm on startup.  A randomly named file is added
> to the root directory of all mapped drives, the \My Documents folder,
> and the \Windows\Start Menu\Programs folder.
>
> If you receive an email that matches this description, please delete
> it immediately.
>
> For complete information regarding this virus, please point your
> browser to:
>
> http://www.symantec.com/techsupp/vURL.cgi/nav47
>
> To be protected against this virus, be sure to update your virus
> definitions through LiveUpdate or the Virus Definition Update
> Installer. If you are unsure as to how to update your virus
> definitions, please point your browser to one of the following
> Internet locations:
>
> How to Run LiveUpdate
>
> http://www.symantec.com/techsupp/vURL.cgi/nav48
>
> How to update virus definition files using the Virus Definition
> Update Installer
>
> http://www.symantec.com/techsupp/vURL.cgi/nav49
>
>
> _____________________________
>
> 2.Subscribing and unsubscribing
>
> If you would like to subscribe to other Symantec newsletters, please
> visit the following Web site and follow the appropriate instructions:
>
> http://www.symantec.com/techsupp/bulletin/index.html
>
> If you no longer want to receive this newsletter, let us know by
> following these steps:
>
> 1.Create a new email addressed to:
>
>   LISTSERV () LSERVER SYMANTEC COM
>
> 2.In the Subject line of your email software, type the following:
>
>   UNSUBSCRIBE
>
> 3.In the body of the message, type the following:
>
>   SIGNOFF NAV-TECHINFO-L
>
> 4.Send the message.
>
> If you would like to unsubscribe from other Symantec newsletters,
> please visit the following Web site and follow the appropriate
> instructions:
>
> http://www.symantec.com/techsupp/bulletin/index.html
>
> _____________________________
>
> 3.Disclaimer
>
> THIS DOCUMENT IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY.
>
> This message contains Symantec Corporation's current view of the
> topics discussed as of the date of this document. The information
> contained in this message is provided "as is" without warranty of any
> kind, either expressed or implied, including but not limited to the
> implied warranties of merchantability, fitness for a particular
> purpose, and freedom from infringement. The user assumes the entire
> risk as to the accuracy and the use of this document. This document
> may not be distributed for profit.
>
> Symantec and the Symantec logo are U.S. registered trademarks of
> Symantec Corporation. LiveAdvisor is a trademark of Symantec
> Corporation. Other brands and products are trademarks of their
> respective holder(s).
>
> (c) Copyright 1999-2000 Symantec Corporation. All rights reserved.
> Materials may not be published in other documents without the
> express, written permission of Symantec Corporation.