SC - New virus to look out for

Siegfried Heydrich baronsig at peganet.com
Fri Mar 2 14:06:22 PST 2001


    There's a new virus making the rounds, and it's shown up twice in my
inbox. Here are the particulars from the Trend antivirus group, so keep your
eyes open!

    Sieggy

Dangerous Baby Pictures -- TROJ_MYBABYPIC.A
- ------------------------------------------------------------------------
TROJ_MYBABYPIC.A propagates via MS Outlook as an EXE attachment to an email:
Subject: My baby pic !!!
Message Body: Its my animated baby picture !!
Attachment: mybabypic.exe

When the EXE file is executed, a message box with the picture of a child is
displayed. When this message box is closed, the Trojan drops several copies
of itself in the Windows/System directory and adds several registry entries
to enable it to execute at each Windows start up. This Trojan needs Windows
Scripting Host to function and, upon execution,  tries to connect to a
certain Web site. In addition to this, the Trojan code also has some
destructive payloads, which range from overwriting files with certain
extensions to deleting certain files.

For additional information about TROJ_MYBABYPIC.A please refer to our Web
site at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_MYBABYPI
C.A


More information about the Sca-cooks mailing list