[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[at-l] New virus alert



Actually a worm.....
W32.Vote.A@mm

                       Discovered on: September 24, 2001
                       Last Updated on: September 24, 2001 at 09:56:27 AM PDT

                      W32.Vote.A@mm is a mass-mailing worm that is written 
in Visual Basic. When executed, it will
                      email itself out to all email addresses in the 
Microsoft Outlook address book. The worm will insert
                      two .vbs files on the system, and it will also 
attempt to delete files from several antivirus products.

                           Subject of email: Fwd:Peace BeTweeN AmeriCa and 
IsLaM!
                           Name of attachment: WTC.exe
                           Size of attachment: 55808 Bytes

                      Technical description:

                      W32.Vote.A@mm is a mass-mailing worm written in the 
Visual Basic language. It requires the file
                      Msvbvm50.dll to execute.

                      When executed, the worm will attempt to email itself 
to all contacts in the Microsoft Outlook address
                      book. The email will appear as follows.

                      Subject: Fwd:Peace BeTweeN AmeriCa and IsLaM!

                      Message:
                      Hi
                      iS iT A waR Against AmeriCa Or IsLaM !?
                      Let's Vote To Live in Peace!

                      Attachment: WTC.EXE


for the whole story.....
http://securityresponse.symantec.com/avcenter/venc/data/w32.vote.a@mm.html

--- StripMime Report -- processed MIME parts ---
multipart/mixed
  text/plain (text body -- kept)
---