Good advice, for more reasons than simply supressing propagation of virusware. ----------------------------Original message---------------------------- On Wed, 16 Jan 91 08:59:57 TUR you said: >Sorry for the cross postings.. A new virus is detected. The name is >GAME2 MODULE sometimes seen as TERM MODULE.. >Our system got it from TRMETU and it seems that it is distributed >by a LISTSERV. The identification of LISTSERV as a vector for this worm is partially a red herring. What happens is this: A user runs the worm. If he happens to have a nickname in his NAMES file that points at a Listserv mailing list, it will send a copy to the list address. Listserv then receives the file, and if the list is set up with the 'Files = Yes' attribute, it distributes the file to the list. Moral of the story: All Listserv managers should carefully evaluate the need for 'Files = Yes' on their lists. Valdis Kletnieks Computer Systems Engineer Virginia Polytechnic Institute