[Ansteorra] New Graphic site virus....

[Muiriath ingen Carthaig]

Greetings,

This is a different kind of worm, you do not have to
open an attachment, just the e-mail itself.
This is what the McAfee site says about it :

This threat attempts to spread via email as embedded
JavaScript (there is no email attachment) and harvests
Yahoo related addresses from the victim's profile. 
Infectious messages may appear as follows:

Subject: New Graphic Site
Body: Note: forwarded message attached.

Reading such an infectious message via Yahoo! Mail can
result in execution of the virus code.

http://vil.nai.com/vil/Content/v_139913.htm

Muiriath

--- gail young <gwynethb63 at yahoo.com> wrote:

> I didn't open the attachment...just opened the email
> itself..it was enough.
>   gwyneth
> 
> Michael Silverhands <silverhands at sbcglobal.net>
> wrote:
>   
> On Jun 13, 2006, at 10:06 PM, caladin wrote:
> 
> > Can anyone tell me the name of the virus, it came
> up in my mozilla
> > preview pane and norton seems to
> > be unaware of it.. I'd like to make a targeted
> scan,
> >
> > Thanks,
> >
> > Caladin
> 
> It's a new worm, which appeared yesterday morning.
> It exploits a 
> JavaScript vulnerability in Yahoo!Mail (i.e., it
> only affects you if 
> you are reading these messages using their web-based
> reader). It 
> doesn't appear to affect anyone else (i.e., if you
> are reading these 
> messages using Outlook [Windows] or Mail [Mac],
> etc.).
> 
> It carries its payload as an attachment. If you
> don't open the 
> attachment, it does nothing. If you delete it
> unread, it does 
> nothing. If you open the attachment *while using
> Yahoo!Mail*, then it 
> harvests your Yahoo!Mail address book and sends
> itself to everyone in 
> that list (and sends the list of addresses to a
> spammer). It makes 
> itself appear to be sent randomly from one of those
> known-good 
> addresses.
> 
> Here's more information about it:
>
(http://www.symantec.com/avcenter/venc/data/js.yamanner@m.html)
> 
> Bottom line: all y'all, delete every message with
> the subject "New 
> Graphic Site", unread.
> 
> Michael Silverhands
> _______________________________________________
> Ansteorra mailing list
> Ansteorra at lists.ansteorra.org
>
http://lists.ansteorra.org/listinfo.cgi/ansteorra-ansteorra.org
> 
> 
>  __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam
> protection around 
> http://mail.yahoo.com >
_______________________________________________
> Ansteorra mailing list
> Ansteorra at lists.ansteorra.org
>
http://lists.ansteorra.org/listinfo.cgi/ansteorra-ansteorra.org
> 

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com