W32/Magistr.b@MM

Information Note Number: IN01-003
5 September 2001

Purpose

Virus Aliases: I-Worm.Magistr.b, PE_MAGISTR.B, W32.Magistr.39921@mm, Win32.Magistr.B

Virus Type: Virus File Infector

On September 03, 2001, a new e-mail virus called W32/Magistr.b@MM was discovered. This virus is a variant of the W32/Magistr.b@MM virus. This virus propagates via an email attachment and infects the local system when the attachment is executed. Once the attachment is executed the virus tries to delete or overwrite certain files, terminate the ZoneAlarm personal firewall program if it is running on the local machine, erase the cmos/bios information, as well as destroying sectors on the hard disk. The virus propagates by using email addresses from the Windows and Eudora Address Book files, Outlook Express folders, and Netscape files.

Full details of the virus as well as removal instructions can be found at a number of sites including:

http://vil.mcafee.com/
www.symantec.com/avcenter/

Note to Readers

The Canadian Cyber Incident Response Centre (CCIRC) provides a focal point for Canada's cyber threat and vulnerability warning, analysis and response. CCIRC is responsible for assuring the resilience of national critical infrastructure through monitoring threats and coordinating a federal response to cyber security incidents of national interest. CCIRC operates in conjunction with the Government Operations Centre (GOC) within Public Safety Canada and is a key component of the government's all-hazards approach to emergency management and national security.

For general information, please contact Public Safety Canada's Public Affairs division at:

Telephone: 613-944-4875 or 1-800-830-3118
Fax: 613-998-9589
E-mail: communications@ps-sp.gc.ca