January 29, 2002

Name :

W32.Myparty@mm

Threat Assessment:

Level 3 (moderate)

Description

* Subject of email: new photos from my party!

* Name of attachment: www.myparty.yahoo.com

* Body: Hello!

My party... It was absolutely amazing!

I have attached my web page with new photos!

If you can please make color prints of my photos. Thanks!

W32.Myparty@mm is a mass-mailing email worm.  The worm searches through the Windows Address Book (used by Microsoft Outlook (Express) and through files with the extension .DBX, which are Microsoft Outlook Express folders and inboxes.

The worm uses its own SMTP engine to send out mails to the SMTP server configured on the machine.

The worm sends email to all contacts in the Windows address book, and to email addresses that it finds in the Outlook Express Inboxes and folders.

In addition, the worm sends a message to the author so that the author can

track the worm.

On NT/2000/XP systems, the worm drops a backdoor Trojan that allows a

hacker to control the system. NAV will detect this as Backdoor.Myparty.

Finally, the file name of the worm is Access.<any extension>, it may launch the Web browser to http:/ /www.disney.com.

Definitions From Symantec

Available.

For more information refer to:

http://securityresponse.symantec.com/avcenter/venc/data/w32.myparty@mm.html

Symantec Security Response

Symantec Security Response is one of the industry¡¯s largest dedicated team of virus experts. With offices located in the United States, Japan, Australia and the Netherlands, the sun never sets on Symantec Security Response. The centre¡¯s mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats and educate the public on safe computing practices. As new computer viruses appear, Symantec Security Response develops identification and detection for these viruses and provides either a repair or delete operation, thus keeping users protected against the latest virus threats

http://securityresponse.symantec.com.

Symantec:

Symantec, the world leader in Internet security technology, provides a broad range of content and network security software and appliance solutions to individuals, enterprises and service providers. The company is a leading provider of client, gateway and server security solutions for virus protection, firewall and virtual private network, vulnerability management, intrusion detection, Internet content and e-mail filtering, remote management technologies and security services to enterprises and service providers around the world.  Symantec¡¯s Norton brand of consumer security products is a leader in worldwide retail sales and industry awards.  Headquartered in Cupertino, Calif., Symantec has worldwide operations in 37 countries.  For more information, please visit www.symantec.com.