[Oremem/Idamem] Computer Virus Warning
Phillip Barker
[email protected]
Thu, 22 Apr 2004 16:05:51 -0700
Fellow MARS members,
There is a new spam message currently being sent to email-users which
tries to get recipients to visit an advertising page and which also
downloads a Trojan to a person's computer.
The characteristics of the message are:
From: The name of the sender is variable, although it tries to make
recipients think it has been sent by the BBC or CNN.
Subject: "Osama Bin Laden Captured",
Message text: "Hey, Just got this from CNN, Osama Bin Laden has been
captured!
Goto the link below to view the pics and to download the video if you so
wish: (Internet address) "Murderous coward he is". God bless America!".
The address indicated in the message takes users to what appears to
be an advertising page. However, the page contains code that exploits a
vulnerability.
The code also downloads and runs a file (detected as VBS/Psyme.C). Finally,
a file called EXPLOIT.EXE, which contains the Trojan Trj/Small.B is
downloaded from Internet onto the users machine.
73,
AAR0ME
Phil Barker
Curry County Computer Services
Gold Beach, Oregon 97444
541.247.3370 Desk