Subject:	関東囲碁部報(2001-35) ウィルスに注意  

本日、事前に高本正さんから聞いてはいましたが、Kohmoto@gol.com
発「It has been played」の標題でウィルスがばら撒かれています。

添付Ｆｉｌｅを絶対に開かないようお願い致します。
ウィルスがKohmoto@gol.comに常駐し、メーリングリストから無作為に
自動発信しています。添付Ｆｉｌｅyears.batを開くとＤｉｓｋ上のＦｉｌｅが破壊され
るウィルスの可能性大です。

*******************************************************
以下は岸原さんからの情報です。
以下にこのVirusの情報がありますので、ご覧になってください。
http://www.symantec.com/avcenter/venc/data/w32.magistr.24876@mm.html

とくに、以下に対策に関しての記述を抜粋しておきます。

To remove this worm:
1. Run LiveUpdate to make sure that you have the most recent virus 
definitions.
2. Start Norton AntiVirus (NAV), and run a full system scan, making sure 
that NAV is set to scan all files.
3. If any files are detected as infected by W32.Magistr.24876@mm, choose 
Repair.
4. Modify the file Win.ini by removing any reference to an infected file 
from the run= line. In most cases, on a clean system, the run= line will 
not be loading anything.

To edit the registry:
CAUTION: We strongly recommend that you back up the system registry before 
making any changes. Incorrect changes to the registry could result in 
permanent data loss or corrupted files. Please make sure you modify only 
the keys specified. Please see the document How to back up the Windows 
registry before proceeding. This document is available from the Symantec 
Fax-on-Demand system. In the U.S. and Canada, call (541) 984-2490, select 
option 2, and then request document 927002.
1. Click Start, and click Run. The Run dialog box appears.
2. Type regedit and then click OK. The Registry Editor opens.
3. Navigate to the key

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Run

4. In the right pane, delete the value which references a file infected by 
W32.Magistr.23876@mm.

NOTE: This virus contains bugs which will corrupt some files while 
attempting to infect them, as well as when the first payload activates. 
These files cannot be repaired; they must be restored from backup. (These 
files may be detected as W32.Magistr.corrupt) 
○●○*******  Enjoy your Business, Enjoy your Life! ********●
●○Kenshi Ohki (Tel:044-201-5212 E-mail: ooki@jp.ibm.com) ●○
○    大木建志     Learning Systems Japan    IBM                ●○●