Virus Alert

[Stu]

i got this alert from our internal IT department at work, thought you might appreciate the info.

Stu

Please note there is a new virus spreading rapidly on the Internet, known as

the W32/Bagle@MM Virus

This is a mass-mailing virus with a remote access component. The virus

arrives in an email message with the following characteristics:

From: (address may be forged)

Subject: Hi

Body:

Test =)

(random characters)

--

Test, yep.

Attachment: (random filename) 15,872 bytes

example:

frjujs.exe

When the attachment is run, the virus checks to see if the system date is

January 28, 2004 or later. If it is on or after this date, the virus exits.

Otherwise, the virus executes the standard Windows calculator program

CALC.EXE, while the virus copies itself to the WINDOWS SYSTEM directory as

bbeagle.exe , and creates a registry key to load itself at system startup:

The worm harvests addresses from the following files and mails itself to

those recipients, using its own SMTP engine.

.wab

.txt

.htm

.html

The virus spoofs the from address by using a harvested address for the

sender's address. When the virus starts spreading, it sends its first mail

to the first address it found and uses the same address in the FROM: field.

The second mail is send to the second address and the FROM field contains

the first address.

The thrid mail is send to the third address and the FROM field contains the

second address and so on.

The virus does not massmail itself to addresses that contain one of the

following strings:

@hotmail.com

@msn.com

@microsoft

@avp.

you are advised not to open any messages with a subject of "Hi" even if they come from people known to you.

[ifraz]

Thanks for posting this Stu.

I never open any attachments from emails I receive which I don't recognise.

[Stu]

Thanks for posting this Stu.

I never open any attachments from emails I receive which I don't recognise.

the scary thing about it is that you might even get it from an address you recognise, as it taps into your email system (i think thats what it does, i'm no IT buff!), but thats what our IT guy said could happen, so...............

BE AWARE!