[Fwd: VIRUS ALERT - W32/Navidad at M]

Sun Nov 12 04:09:20 UTC 2000

-------- Original Message --------
Asunto: VIRUS ALERT - W32/Navidad at M
Fecha: Fri, 10 Nov 2000 19:56:35 -0800
De: "McAfee.com Dispatch"<dispatch at mcafee.com>
A: "devoghel at intermor.net.mx" <devoghel at intermor.net.mx>

(((((((((((((((((( McAfee.com Dispatch )))))))))))))))))))))

_______________________VIRUS ALERT__________________________

[This message is brought to you as a subscriber to the 
McAfee.com Dispatch. To unsubscribe, please follow the 
instructions at the bottom of the page.]

      ******* VIRUS ALERT - W32/Navidad at M ********

Dear McAfee.com Dispatch Subscriber: 

W32/Navidad at M is an Internet worm that spreads using the 
Windows email program Outlook. McAfee AVERT has given it a 
risk assessment of MEDIUM-ON WATCH, due to a significant 
increase in infection levels worldwide. 

The email can come from addresses that you will recognize. 
Attached is a file named NAVIDAD.EXE and when it is run, it 
displays a dialog box entitled, "Error" which reads "UI". A 
blue eye icon then appears in the system tray next to the 
clock in the lower right corner of the screen, and a copy of 
the worm is saved to the file "winsvrc.vxd" in the WINDOWS 
SYSTEM directory. 

If your PC becomes infected with the W32/Navidad at M worm, all 
subsequent emails addressed to you will be responded to 
automatically with an email from your address with the 
W32/Navidad at M worm as an attachment. 

Click here for detection and removal instructions:
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1956 

MCAFEE.COM CLINIC SUBSCRIBERS:
If you don't have ActiveShield installed and/or updated, you 
are not protected from infection from this worm. 
Click here to download ActiveShield:
-> http://clinic.mcafee.com/clinic/virusscan/activeshield/default.asp?area=activeshield 

If you are not a subscriber to the McAfee.com Clinic please 
click here to get instant protection:
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1957 

MCAFEE VIRUSSCAN USERS (notes on detection and removal using 
McAfee VirusScan): 
McAfee VirusScan 4.1.00 and above with DAT file 4105 and 
higher will detect and remove W32/Navidad at M. Click here for 
complete instructions on removal and repair:
-> http://vil.mcafee.com/dispVirus.asp?virus_k=98881 

--McAfee.com 

_______________________Virus Fixes__________________________

Find out more about this virus. Click here to go to the 
W32/Navidad at M Help Center. 
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1956

Become a McAfee.com Clinic subscriber and check your system 
online. To use VirusScan Online, click here. 
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1957

Purchase the latest copy of VirusScan, please click here. 
-> http://store.mcafee.com/category.asp?CatID=3&CategoryLevel=1&rfr=VSCALRT

Upgrade to the latest VirusScan. Purchase the VirusScan 
Maintenance Plan which entitles you to 12 months of upgrades, 
click here. 
-> http://store.mcafee.com/category.asp?CatID=18&CategoryLevel=1&rfr=VRSPLN

Download the latest DAT files, click here. 
-> http://download.mcafee.com/updates/updates.asp

_____________________Anti-Virus Tips________________________

Find out how to detect and prevent viruses with these handy 
tips. Click here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1589

________________________Partners____________________________

AllBusiness.com - Register for your weekly business 
newsletter. Click here. 
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1622

Driveway - Free 25MB of online storage. Click here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1623

Dash.com - Download your dashbar: the safest, most complete 
online companion you’ll ever need. Click here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1832

______________________Special Offer_________________________

McAfee QuickClean:
* Improves System Performance
* Removes Internet Clutter
* Covers Your Tracks...........and more!

Click here to find out more:
-> http://promos.mcafee.com/quickclean/default.asp?rfr=QC_1500

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 

         This Virus Alert has been issued by the 
     McAfee Anti-Virus Emergency Response Team (AVERT).

McAfee.com Support: To contact us about this dispatch, click here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1594

Subscribe: If you received this message from a friend and 
would like to subscribe to McAfee.com Dispatch, click here.  
-> http://dispatch.mcafee.com/sub.asp?s=22

Unsubscribe: If you do not wish to receive email, click here.
-> http://dispatch.mcafee.com/unsub.asp  

Note: Promotions are subject to change without notice.

Click here to view our permission policy. 
-> http://dispatch.mcafee.com/permission_policy.asp