Re: Beware of virus

[ Follow Ups ] [ Post Followup ] [ The Henna Page Forum ] [ FAQ ]

Posted by Angel-2 on September 25, 2001 at 20:44:04:

In reply to: Beware of virus posted by Theadora on September 25, 2001 at 17:41:10:

Here's some info:

Vote worm preys on WTC bombing anxiety
This worm capitalizes on the recent World Trade Center bombings by
asking e-mail recipients to vote on who is at war.

By Robert Vamosi, ZDNet Reviews

In total bad taste, the Vote worm spreads a message of Us vs. Them
through the Internet in the aftermath of the World Trade Center
bombings. In addition to sending itself out to every address in one's
Microsoft Outlook address book, however, Vote (W32.Vote.A@mm) also
attempts to delete Windows directory files and/or reformat the
infected user's hard drive. At present Vote is not spreading very
fast, however, given its ability to delete files, this worm ranks as
a 6 on the ZDNet Virus Meter.

How it works
Vote arrives as an e-mail with the following information:

Subject: Fwd: Peace BeTween AmeriCa And IsLam

Body: Hi! iS iT A waR Against AmeriCa Or IsLam! Let's Vote To Live in
Peace!

Attached: WTC.EXE

If the attached file is opened, Vote will install two .vbs files on
the hard drive.

MixDaLaL.vbs will attempt to overwrite all files ending with .htm
or .html with the following phrase:

AmeRiCa ...Few Days WiLL Show You What We Can Do !!! It's Our Turn >
> > ZaCkEr is So Sorry For You.
The second .vbs file, ZaCker.vbs, will add a line to the registry
that will run the vbs script the next time the computer is rebooted.
ZaCker.vbs attempts to delete all files in the Windows directory and
add a Format C: command to the autoexec.bat file. It will also
display the following message:

I promiss We WiLL Rule The World Again...By The Way,You Are Captured
By ZaCker!!!"

Follow Ups

Post Followup

Name:
E-Mail:
Subject:
: Here's some info: : : Vote worm preys on WTC bombing anxiety : This worm capitalizes on the recent World Trade Center bombings by : asking e-mail recipients to vote on who is at war. : : By Robert Vamosi, ZDNet Reviews : : : In total bad taste, the Vote worm spreads a message of Us vs. Them : through the Internet in the aftermath of the World Trade Center : bombings. In addition to sending itself out to every address in one's : Microsoft Outlook address book, however, Vote (W32.Vote.A@mm) also : attempts to delete Windows directory files and/or reformat the : infected user's hard drive. At present Vote is not spreading very : fast, however, given its ability to delete files, this worm ranks as : a 6 on the ZDNet Virus Meter. : : How it works : Vote arrives as an e-mail with the following information: : : Subject: Fwd: Peace BeTween AmeriCa And IsLam : : Body: Hi! iS iT A waR Against AmeriCa Or IsLam! Let's Vote To Live in : Peace! : : Attached: WTC.EXE : : If the attached file is opened, Vote will install two .vbs files on : the hard drive. : : MixDaLaL.vbs will attempt to overwrite all files ending with .htm : or .html with the following phrase: : : : AmeRiCa ...Few Days WiLL Show You What We Can Do !!! It's Our Turn > : > > ZaCkEr is So Sorry For You. : The second .vbs file, ZaCker.vbs, will add a line to the registry : that will run the vbs script the next time the computer is rebooted. : ZaCker.vbs attempts to delete all files in the Windows directory and : add a Format C: command to the autoexec.bat file. It will also : display the following message: : : I promiss We WiLL Rule The World Again...By The Way,You Are Captured : By ZaCker!!!"
Optional link URL:
Link title:
Optional image URL: