[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[at-l] New virus alert
- Subject: [at-l] New virus alert
- From: kahley7@ptd.net (kahley)
- Date: Mon, 24 Sep 2001 17:39:36 -0500
Actually a worm.....
W32.Vote.A@mm
Discovered on: September 24, 2001
Last Updated on: September 24, 2001 at 09:56:27 AM PDT
W32.Vote.A@mm is a mass-mailing worm that is written
in Visual Basic. When executed, it will
email itself out to all email addresses in the
Microsoft Outlook address book. The worm will insert
two .vbs files on the system, and it will also
attempt to delete files from several antivirus products.
Subject of email: Fwd:Peace BeTweeN AmeriCa and
IsLaM!
Name of attachment: WTC.exe
Size of attachment: 55808 Bytes
Technical description:
W32.Vote.A@mm is a mass-mailing worm written in the
Visual Basic language. It requires the file
Msvbvm50.dll to execute.
When executed, the worm will attempt to email itself
to all contacts in the Microsoft Outlook address
book. The email will appear as follows.
Subject: Fwd:Peace BeTweeN AmeriCa and IsLaM!
Message:
Hi
iS iT A waR Against AmeriCa Or IsLaM !?
Let's Vote To Live in Peace!
Attachment: WTC.EXE
for the whole story.....
http://securityresponse.symantec.com/avcenter/venc/data/w32.vote.a@mm.html
--- StripMime Report -- processed MIME parts ---
multipart/mixed
text/plain (text body -- kept)
---