[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[at-l] Possible virus
Profile
Virus Name: W32/Naked@MM
Risk Assessment: High
Virus Characteristics
This worm masquerades as a Flash movie. When run, it sends itself to all
recipients in the Outlook Address Book and attempts to deletes all .BMP,
.COM, .DLL, .EXE, .INI, and .LOG files in the WINDOWS and WINDOWS\SYSTEM
directories. This program is written in Visual Basic and requires the Visual
Basic 6 (or higher) runtime files. When run, it copies itself to a TEMP
directory and displays a Window entitled "Flash", which reads "JibJab
Loading". It proceeds by sending a separate email message, using Microsoft
Outlook, to each recipient in the Outlook Address Book. The messages appear
as follows:
Subject: Fw: Naked Wife
Body:
My wife never look like that! ;-) Best Regards,
(sender's name) Attached: NakedWife.exe Choosing the HELP|ABOUT menu in the
"Flash" window displays a message box entitled "Flash", which reads "You're
are now F**KED! (C) 2001 by BGK (Bill Gates Killer)" (** replaces the actual
text displayed)
More info can be found here.
<A HREF="http://vil.nai.com/vil/default.asp">McAfee - AVERT</A>
Wildbill
In a message dated 3/7/2001 10:52:47 AM Eastern Standard Time,
kahley7@ptd.net writes:
> MSNBC just reported on the tube...
> A very destructive new virus with the title
> Naked Wife
> Can someone who knows how check this out?
>
--- StripMime Report -- processed MIME parts ---
multipart/alternative
text/plain (text body -- kept)
text/html
---