This is G o o g l e's cache of http://csf.colorado.edu/mail/pfvs/2001I/msg01152.html as retrieved on 16 Mar 2004 17:38:44 GMT.
G o o g l e's cache is the snapshot that we took of the page as we crawled the web.
The page may have changed since that time. Click here for the current page without highlighting.
This cached page may reference images which are no longer available. Click here for the cached text only.
To link to or bookmark this page, use the following url: http://www.google.com/search?q=cache:Geg5LuH3UqAJ:csf.colorado.edu/mail/pfvs/2001I/msg01152.html++%22David+MacClement%22+site:csf.colorado.edu&hl=en


Google is not affiliated with the authors of this page nor responsible for its content.
These search terms have been highlighted: david macclement 

[pf] a more serious virus, if you use MS Outlook
< < <
Date Index
> > >
[pf] a more serious virus, if you use MS Outlook
by David MacClement
07 March 2001 02:32 UTC
< < <
Thread Index
> > >
· My wife, (fully clothed, in her office) sent me warning from Auckland
University's computer-support people, about e-mails with:

Subject: Fw: Naked Wife

· It requires that your machine have installed: Visual Basic 6 (or higher),
and Microsoft Outlook.

· Here's what McAffee has to say; note: Date Added: 3/6/01 10:36:29 AM

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://vil.mcafee.com/dispVirus.asp?virus_k=99035&;
  is:

Virus Profile  
  
W32/Naked@MM is a High risk Virus 

 
Virus Name
W32/Naked@MM  
Date Added
3/6/01 10:36:29 AM  
 
Virus Characteristics
This worm masquerades as a Flash movie. When run, it sends itself to all
recipients in the Outlook Address Book and attempts to deletes all .BMP,
.COM, .DLL, .EXE, .INI, and .LOG files in the WINDOWS and WINDOWS\SYSTEM
directories. 
This program is written in Visual Basic and requires the Visual Basic 6 (or
higher) runtime files. When run, it copies itself to a TEMP directory and
displays a Window entitled "Flash", which reads "JibJab Loading". It
proceeds by sending a separate email message, using Microsoft Outlook, to
each recipient in the Outlook Address Book. The messages appear as follows: 

Subject: Fw: Naked Wife
Body:
My wife never look like that! ;-) 

Best Regards,
(sender's name) 

Attached: NakedWife.exe 

 ...
-----------------------------------------------------------------------

Indications Of Infection
- Absence of .BMP, .COM, .DLL, .EXE, .INI, and .LOG files in the WINDOWS
and WINDOWS\SYSTEM directories 
- Inability to launch applications 
- Email correspondence alerting you that they have received the attachment
NakedWife.exe from you. 
- Missing WIN.COM error message upon restarting Windows 

Method Of Infection

This worm arrives as the email attachment, NakedWife.exe . Executing this
application infects your machine and causes the worm to mail itself to
regular email correspondence. 


Virus Information
 Discovery Date: 3/6/01 
 Origin: USA  
 Length: 73,728  
 Type: Virus  
 SubType: E-mail 
 Risk Assessment: High 

Aliases

I-Worm.Naked.A (AVX), NakedWife.exe, TROJ_NakedWife (Trend), W32.Naked@MM
(NAV), W32/Naked (Sophos)
 
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
David.
(David MacClement) davd@ihug.co.nz 
http://www.geocities.com/davdd.geo/index.html#top
************************************************

____________________________________________________________
T O P I C A  -- Learn More. Surf Less. 
Newsletters, Tips and Discussions on Topics You Choose.
http://www.topica.com/partner/tag01

< < <
Date Index
> > >
Positive Futures List Archives
at CSF
Subscribe to Positive Futures < < <
Thread Index
> > >