You can find information on this virus at the major antivirus software
vendors, such as symantec.  They include a description of it, as well as
information on how to remove it.  I assume your friend has some antivirus
software and I would suggest going to the site of that software.  They'll
need to update the signatures for their software at that site anyway.
Typically, the first step in removing the virus will be to run the AV
software (after updating it) and let it detect infected files and try to
repair them.  The web site should describe whether other steps are
necessary.

I got sent an infected email with this virus myself.  It's a bit clever in
that it generates random email content from the infected computer's text
files and it somewhat randomly selects an executable file to infect and send
along as an attachment.  A person can easily assume that the attachment will
make explain the somewhat odd and out of context email that they received.
Don't be tempted by it's oddness.  Instead check back with the sender to
make sure they really sent the email and not a virus.

Although relatively benign at first, the longer this virus inhabits a
computer the more it unloads its destructive payload.

John

----- Original Message -----
From: "Curt Pfaff" <[log in to unmask]>
Sent: Thursday, August 09, 2001 10:37 PM
Subject: Virus


> Hello,
> I have a friend that has this virus:
> W32/Magistr@MM Virus Found    aka: start.exe
> I was wondering if anyone had any info about this one. This one is a new
one to me. Any help apreciated.
> Curt

               The NOSPIN Group Promotions is now offering
              Mandrake Linux or Red Hat Linux CD sets along
         with our NOSPIN Power Linux CD...  at a great price!!!
             http://freepctech.com/goodies/promotions.shtml