----- Original Message -----
From: "AVG Virus Alert" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Monday, September 03, 2001 4:00 PM
Subject: AVG Virus Alert - I-Worm/Apost


>
>        ********************************************
>        ***  New AVG Update Files were released  ***
>        ********************************************
>
>        Release Date  : 09/03/2001 (mm/dd/yyyy)
>        Update Number : 276
>
>
> We'd like to announce that new update files for AVG Anti-Virus System
> were released.
>
> You can download the update file FREE OF CHARGE and your installation of
> AVG will be updated to the latest shape (new virus descriptions will
> be added into program virus database and you will get a new versions
> of executable programs with bug-fixes, enhanced features and more ... )
>
> How to get your AVG Update file ?
> ---------------------------------
>
> 1) you can use AVG's automatic Update feature. Check AVG Control Center
>   (AVG icon on the tray bar) and the Update tab.
>
> 2) you can download the Update file manually using your browser.
>
>   Please note there are several different Update files, depending on
>   the version of AVG Anti-Virus system (Free Edition, Commercial
>   version, trial versions ...). Check the version of AVG you currently
>   use and then choose appropriate one to be sure you will download the
>   proper file.
>
>   Wait until download will be completed, then move the update file to
>   the AVG UPDATE directory and run the AVG program.
>
>   The Update file can be downloaded from our website at
>
>   Main Update Page :  http://www.grisoft.com/html/us_updt.cfm
>
>
>   ADVANCED TIP :
>
>   If you have a bad or slow connection you can check our European
>   mirror and these links (valid for English version of 6.0 only) :
>
>   * Free Edition : http://www.grisoft.cz/softw/60/fe/d601n5mv.bin
>   * Commercial   : http://www.grisoft.cz/softw/60/uk/d601n5mq.bin
>
> ----------------------------------------------------------
> DESCRIPTON:
>
> I-Worm/Apost
> ------------
>
> It is a new mass mailing worm written in Visual Basic.
>
> The worm is spreading as a file README.EXE in messages with the
> subject:
>
>     As per your request!
>
> and the body:
>
>     Please find attached file for your review.
>     I look forward to hear from you again very soon.
>     Thank you.
>
> When is the README.EXE file is executed it copies itself into Windows
> directory and create in the registry key:
>
>     HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
>
> a value named "macrosoft"
> pointing to the dropped copy of the worm.
>
> Then the worm takes email addresses from Outlook address book
> and starts sending itself.
>
> Next, it displays a message box with a button 'Open'. When
> you click on it, a fake error message appears:
>
>     WinZip SelfExtractor: Warning
>     CRC eror: 234#21
>
> Update 276, that detects this worm, is ready on our web.
> ----------------------------------------------------------
>
> If you have any comment, questions or need more information, please
> feel free to contact us at [log in to unmask]
>
> Thank you for you interest in AVG Anti-Virus System.
>
> --
> GRISOFT Inc.
> Developers of AVG Anti-Virus System
>
>
> ===================================================================
>
> = If you want to unsubscribe this free announcement service, please
>
> = visit our web pages at http://www.grisoft.com/html/us_alert.cfm
>
> = and cancel your subscription. You can send email to
>
> = [log in to unmask] to be removed from
>
> = this list.
>
> = For a change of your email address, please visit the web interface
>
> = at http://lists.grisoft.cz/
>


VICUG-L is the Visually Impaired Computer User Group List.
To join or leave the list, send a message to
[log in to unmask]  In the body of the message, simply type
"subscribe vicug-l" or "unsubscribe vicug-l" without the quotations.
 VICUG-L is archived on the World Wide Web at
http://maelstrom.stjohns.edu/archives/vicug-l.html