[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FW1] FW: Anna Kournikova virus information - Please Read
I just received a posting from this newsgroup with the virus, in case you
all doesn't know.
----------------------------------------------
Name: VBS/SST-A
Aliases: Kalamar.A, Calamar
Type: Visual Basic Script worm
Date: 12 February 2001
Will be detected by Sophos Anti-Virus April 2001 (3.44) or
later. A virus identity (IDE) file is available for earlier
versions.
Sophos has received several reports of this worm from the wild.
Description:
VBS/SST-A is an email-aware Visual Basic Script worm.
The worm arrives in an email with the following characteristics:
Subject line: Here you have, ;0)
Message text: Hi:
Check This!
File attachment: AnnaKournikova.jpg.vbs
The virus lures users into activating it by pretending to be a
jpeg graphic of Russian tennis player Anna Kournikova.
The first time the attached file is executed it mails itself to
everybody in your Outlook address book.
The worm makes changes to the Registry, creating an entry called
HKCU\software\OnTheFly.
On the 26th of January the worm attempts to connect to a website
in the Netherlands, www.dynabyte.nl
Download the IDE file from
http://www.sophos.com/downloads/ide/sst-a.ide
Read the analysis at
http://www.sophos.com/virusinfo/analyses/vbsssta.html
Download a ZIP file containing all the IDE files available for
the current version of Sophos Anti-Virus from
http://www.sophos.com/downloads/ide/ides.zip
Read about how to use IDE files at
http://www.sophos.com/downloads/ide/using.html
To unsubscribe from this service please visit
http://www.sophos.com/virusinfo/notifications
<<attachment: winmail.dat>>
