FW: Virus alert

[Stephen Dawes]

Although this is off topic, and yes I know that there are those of you that
believe that Linux is immune to viruses, there are still some on the list
that may be affected by this virus, especially those that use The Other
Operating System, to read their mail with.



Stephen Dawes B.A. B.Sc.
Web Business Office, The City of Calgary
PHONE:  (403) 268-5527. FAX: (403) 268-6423
E-MAIL ADDRESS:  sdawes at gov.calgary.ab.ca




-----Original Message-----
From: ITS Security [mailto:its.security at gov.calgary.ab.ca]
Sent: Wednesday, May 09, 2001 8:35 AM
To: Strategic.Services at gov.calgary.ab.ca
Subject: FW: Virus alert
Importance: High


This Internet worm was created with a Visual Basic Script worm generator. It
propagates only via Microsoft Outlook by sending itself as an email
attachment to all addresses listed in the infected user's address book.
After this, the worm tries to randomly open certain pornographic Web sites
using Internet Explorer. The worm checks if the email that it sent out
exists in the MS Outlook Journal and Sent Items folder, by looking for the
subject "Homepage." When it finds email with the subject "Homepage" in these
folders, the worm deletes the email to prevent detection.

It arrives looking like the following:

Subject: Homepage
Message Body: Hi! You've got to see this page! It's really cool ;O)
Attachment: HOMEPAGE.HTML.VBS


Again: The City's e-mail virus scanning software is scanning for the new
worm, and the desktop Norton Antivirus software will also identify it if
Norton is up to date and running.

However, as many of you have computers at home it was decided to issue an
alert. Please use caution when processing e-mail and opening attachments,
even from known contacts.

Thank you.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://linux-speakup.org/pipermail/speakup/attachments/20010509/2617483e/attachment.html>