Do not open Yahoo email (or read Yahoo Group messages) with the title "New
Graphic
Site" - delete them without opening them. Many members of Yahoo Groups got a
worm
in their computers when they opened emails titled "New Graphic Site." Below are
some of
the warnings and anguish about this problem. Since I am about 5 days late on
this, I
guess it shows that being slow sometimes is an advantage. Don

(1) I see this article on the "PC World" website Saturday June 17, 2006:

_Worm Attacks Yahoo E-Mail__

Mass-mailing worm exploits a vulnerability in the Web-based e-mail, but
its_impact is
low.__

Jeremy Kirk, IDG News Service_Monday, June 12, 2006__

A mass-mail worm that exploits a vulnerability in Yahoo's Web-based e-mail_is
making
the rounds but the impact appears to be low, security vendor_Symantec said
today.__The
worm, which Symantec calls JS.Yamanner@m, is different from others in_that a
user merely
has to open the e-mail to cause it to run, said Kevin_Hogan, senior manager for
Symantec
Security Response. Mass-mail worms have_usually been contained in an attachment
with
an e-mail note encouraging a_user to open it.__The worm, written in _JavaScript,
takes
advantage of a vulnerability that_allows scripts embedded in HTML e-mail to run
in the
users' browsers. Yahoo_users should be able to modify their settings to block
the zero-
day exploit,_Hogan said.__Symantec rated the worm a Level 2 threat, one notch
above its
least harmful_ranking. Hogan said the worm did not appear to be spreading
widely, and
he_did not anticipate the threat level rising.__

How It Spreads__When activated, the worms then sends itself to other users in
the
victim's_address book who also use Yahoo e-mail with the suffixes of @yahoo.com
or_@yahoogroups.com. The worm mimics a function within Yahoo's Web mail
called_"Quickbuilder," which allows a user to add contacts in an address book
from_received e-mail, Hogan said. The process, however, is transparent to
the_victim, he
said.__The harvested e-mail addresses are sent to a remote server. Users of
Yahoo_Mail
Beta do not appear to be affected, Symantec said.__The worm also opens a browser
that
displays a Web page that does not appear_to contain malicious content.__Although
Yahoo's Web e-mail has not been fixed, users are advised to update_virus and
firewall
definitions and block any e-mail sent from av3@...._The subject line of
the e-mail
with the worm says "New Graphic Site," and_the body says "this is test."__

Yahoo officials could not immediately be reached for comment.


(2) To: Terry_UK@yahoogroups.com
Date: Mon, 12 Jun 2006 21:20:04 -0000
Subject: ""Notice"" re Attachments

As of now all attachments to messages will be
automatically removed. This is due to the 'Graphic
File' message attachment which is causing havoc at
the moment within groups.

I will NOT be turning this feature on in the near
future so please don't ask... :-))

regards
TerryUK



(3) To: Terry_UK@yahoogroups.com
Date: Mon, 12 Jun 2006 21:04:04 -0000
Subject: Re: SOS - TERRY!!!!: Graphic Site messages

I suggest ALL members clear their cookies from the hard drive,
then search the hard drive for 'cookies' and if any show up
they're not sure of delete them there (within search program).
Then run their Anti-Virus program. I'm not sure if this will
get rid of whatever is the problem but it should help.__
regards_TerryUK__

--- In Terry_UK@yahoogroups.com, dedeweedy@... wrote:
_>_> Terry,_
> I think they might be a new virus. I'm having troubles in some of
my groups with them and also some members are getting multiple
long messages in their mail boxes. And the sad thing is they appear
to be sent from good, long standing members who did NOT mail them.
( They are being sent _automatically it appears.
Dee



(3) To: Terry_UK@yahoogroups.com
Date: Mon, 12 Jun 2006 11:46:00 -0700
Subject: Message from Sue (Austria)

It seems that a few of the groups have been getting post
from Sue (Austria) and a few other members, but I can't
say who they are, due to the fact that I deleted them
permanantly and can't remember who they are.

Below is part of a message I received from Sue.
And she feels just terrible about it.


Message from Sue

----------------------------------------------------------------------------
-----------

Pepper I have been receiving all sorts of failure
notices from yahoo mail service from things I never
sent!...crazy sites....I took off the cookies and
cleared up the temp files and it seems better...

but I came up here tonight and it looks like they
or it is sending me as the sender to other people!

It all started when I opened a message from Mike
sunderland in UK Terry's group. New graphic site
and when I clicked I started to receive awful mails
and the graphic page kept on coming back and back...
finally clicked off but now I think I have a bug??

This all I needed....Do you have any advice???
my virus auto update is working...
can't figure this out!

Susan


To: Terry_UK@yahoogroups.com
Date: Mon, 12 Jun 2006 18:25:43 -0000
Subject: Re: Graphic Site messages
I'm deleting these 'Graphic Site' messages because
I cannot see what they have to do with music or mp3's.
When I look at them all I see is 'Graphic Site'
repeated again and again. I have also seen references
to sexual matters, there are plenty of Yahoo groups
for that.
Please do not post these messages.
Thank you.
regards_TerryUK