Virus Alert !!!

May 20, 2000

Few simple precautions may be very helpful ...

<html>

<head>

charset=iso-8859-1 " >

2.2.14 i686) [Netscape] " >

<title>Exploits and Hoaxes</title>

</head>

<body text= " #000000 " bgcolor= " #FFFFFF " link= " #0033CC " vlink= " #00639C "

alink= " #47A959 " background= " blackfade.gif " MARGINHEIGHT= " 0 "

MARGINWIDTH= " 0 " TOPMARGIN= " 3 " LEFTMARGIN= " 0 " >

& nbsp;

<tr>

<td>05-18-2000

VBS/NewLove-A is a Visual Basic

Script

virus

that mutates its appearance in an attempt to avoid detection by

anti-virus products.

If you are infected by the virus it will do the following:

The virus chooses a random filename and attempts to forward a

mutated version of itself to everybody in your Microsoft Outlook

address book. & nbsp; The name of the file it forwards is determined

by

randomly choosing one of the filenames in your Windows\Recent

folder, appended with " .Vbs " & nbsp; (for instance, EXPENSES.XLS

becomes

EXPENSES.XLS.Vbs).

The message has the subject line: " FW: & lt;filename> " where

filename

is the name of the file it is forwarding, with the extension

" .Vbs " removed. & nbsp; So, if the attached infected file is

README.DOC.Vbs then the subject line will be " FW: README.DOC " .

<a

href= " http://www.virusbtn.com/VirusInformation/newlove.html " >MORE

INFORMATION</a>

05-17-2000 (discovered in the wild).

W32/SouthPark-A is an email-aware

worm

that uses

& nbsp;Microsoft Outlook to spread itself as an email message

attachment. The subject of the message is " Servus Alter " . & nbsp;

The message body contains the text " Hier ist das Spiel,

& nbsp;das du unbedingt wolltest! :-) " . The attached file name is

" South Park.exe " .

05-04-2000

LoveLetter, aka Love Bug

( " ILOVEYOU " ) & nbsp;

10's of thousands of E-Mail servers were shutdown, millions of

users

were

affected, and the Financial damage is estimated to exceed 7

Billion.

The IPRG network reacted to this threat as a non-event.

04-01-2000

911 virus

At 8:00 am on Saturday, April 1 (This is not an April Fool's

joke!)

the FBI announced it had discovered malicious code wiping out the

data

on

hard drives and dialing 911. & nbsp; This is a vicious virus and

needs

to

be stopped quickly. That can only be done through wide-scale & nbsp;

individual action. & nbsp;

The FBI Advisory is posted at <a

href= " http://www.nipc.gov/nipc/advis00-038.htm " >ht

tp://www.nipc.gov/nipc/advis00-038.htm</a>

03-27-2000

Irok-10000 spreads by

infecting

files, emailing itself and

propagating over Internet Relay Chat (IRC). The

virus

creates a copy of itself named irok.exe in the

Windows

System

directory and a VBScript file named irokrun.vbs in

the

Programs\Startup program group. This script is used

to

email the

virus to the first 60 entries in your Outlook

address

book.

The subject of the email sent by the virus is " I

thought

you

might like to see this. "

The body of the message is " I thought you might like

this. I got

it from paramount pictures website. It's a startrek

screen

saver. "

The virus is attached to the mail as a file named

Irok.exe.

When the file is run it will display white dots

moving

across

the screen. If mIRC is installed it will also create

a

script.ini file in the mIRC & nbsp; directory.

03-15-2000

A prank e-mail is spreading currently around Europe.

Our & nbsp;

customer services have already received several

calls & nbsp;

regarding it and it is likely that the e-mail will

be & nbsp;

forwarded further.

[This is a chain e-mail stating that Nokia is handing out

free phones to people who forward this this e-mail.] & nbsp;

03-14-2000

We have been warned about a new computer virus

called

Melting

Screen Worm

(alias W32.Melting.Worm).

This worm sends e-mails with an infected attachment

called

" MeltingScreen.exe " with a subject " Fantastic

Screensaver " .

The message body is:

" Hello my friend! Attached is my newest and funniest

Screensaver, Inamed it

MeltingScreen. Test it and tell me what you think.

Have

a nice day my

friend.

p.s.: Please install the Runtime Library for VB5.0,

before

you run the

ScreenSaver. "

This worm renames all EXEs in the Windows directory

to

BIN. It has a screen

saver that indeed 'melts the screen'.</td>

</tr>

</table></center>

</td>

</tr>

<center> & nbsp;<font

face= " Arial,Helvetica " >Proactive

Virus Detection Gateway</center>

& nbsp;</td>

</tr>

</table>

</body>

</html>

Sign In

Virus Alert !!!

Recommended Posts

Guest guest

Link to comment

Share on other sites

Join the conversation

Support the Ashram

Join Groups

Top Downloads