Virus Alert from Symantec


[ Follow Ups ] [ Professional Networkers Message Board ] [ Archives Index ] [ Back ]

Posted by Web Services-Professional Networkers on December 19, 2001 at 17:37:15:

W32.Reeezak.A@mm is a mass-mailing worm that uses Microsoft Outlook and MSN Messenger. The worm will have the following characteristics:

Subject: Hii
Body:
I can't describe my feelings
But all i can say is
Happy New Year :)
bye
Attachment: Christmas.exe

In addition, the worm modifies the Internet Explorer start page to a malicious homepage. This webpage uses an Internet Explorer exploit to create a VBScript file on the system which then spreads itself via network shares and mIRC. The script file also attempts to delete common antivirus products.

Symantec Security Response is currently analyzing this worm.



Follow Ups: