Autor: Dariusz (dariusj_at_poczta.onet.pl)
Data: Wed 07 Mar 2001 - 13:39:37 MET
Masquerades as a Flash movie
The bug masquerades as a Macromedia Flash movie, using
the subject line "Fw:
Naked Wife." The e-mail message states that: "My wife
never look like that! :-)
Best Regards," and then adds the name of the sender.
Those who open the attachment, NakedWife.exe, view a
window that reads
"JibJab Loading." It then tries to delete all .BMP,
.COM, .DLL, .EXE, .INI, and
.LOG files in the WINDOWS and WINDOWS/SYSTEMS
directories.
It also spreads via Microsoft Outlook, sending out
copies to every e-mail address
in an infected user's address book.
Users choosing the
Help/About menu
from the "Flash" window
receive an
obscene message attributed
to: "(C) 2001
by BGK (Bill Gates
Killer)."
The logo used in the fake
Flash file
belongs to JibJab Media
Inc., based in
Brooklyn, New York. John
Nugent,
JibJab's vice president of
production,
said the company is very
irate about the
logo being used as part of
the virus.
"Our concern is that
people think it's
coming from us, which it's
not," said
Nugent.
He said many people are familiar with JibJab
legitimate Flash productions,
possibly leading users to trust the attachment.
The "Naked Wife" virus appears to have originated in
the United States, said
McAfee.com's Goostree, noting that they received the
first report from a national
government agency.
Antivirus firm F-Secure Inc. is also warning users to
be on the lookout. But
while McAfee.com believes it originated in the U.S.,
F-Secure said that the most
probable point of origin is Brazil. Officials at
F-Secure added that they have seen
only minimal infections so far.
'Love, sex' make people click
As with the "ILOVEYOU" and "Anna Kournikova" viruses,
deception was used
to get people to click on the attachment. In other
words, sexual innuendo or
suggestions often dupes people into opening a message
they would otherwise
ignore.
"Love is a pretty good topic to get people to open at
attachment," Goostree said.
"But sex is an even better one."
To prevent virus infections, antivirus experts
recommend that Internet users
refrain from opening attachments from unknown sources
and that corporate
managers consider Internet content filters to block
questionable e-mail.
To archiwum zostało wygenerowane przez hypermail 2.1.7 : Tue 18 May 2004 - 21:37:45 MET DST