Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Homepage Virus

  • 09-05-2001 9:49am
    #1
    Canaboid
    Registered Users, Registered Users 2 Posts: 1,641 ✭✭✭


    Name: VBS/VBSWG-X
    Aliases: VBS.HomePage, VBS.VBSWG2.X@mm, VBS.VBSWG2.D@mm, VBS_HomePage.A, VBS/SST.gen@mm
    Type: Visual Basic Script worm
    Detection: Will be detected by Sophos Anti-Virus June 2001 (3.46) or later. A virus identity (IDE) file is available for earlier versions from the Latest virus identities section.
    At the time of writing Sophos has received several reports of this worm from the wild.

    Comments: VBS/VBSWG-X is an email aware worm based around the VBSWG virus writing kit. It uses Outlook to email itself to each entry in your Outlook address book.

    The worm arrives with the subject "Homepage" and an attachment called "homepage.HTML.vbs".

    The body text is:

    Hi!

    You've got to see this page! It's really cool ;O)

    When the worm is executed it saves itself to the file homepage.HTML.vbs in the system temporary directory.

    The first time it is run the worm sends itself to everyone in your address book and then sets the registry entry "HCKU\software\An\mailed" to 1 to prevent the email code being run multiple times.

    The worm then randomly chooses one of four possible adult-orientated website addresses, and displays it using the default web browser.

    From www.sophos.com


Comments

  • #2
    Hobbes
    Registered Users, Registered Users 2 Posts: 21,264 ✭✭✭✭Hobbes


    "But boss, I wasn't surfing porn. It's a virus!"


  • #3
    sutty
    Registered Users, Registered Users 2 Posts: 4,109 ✭✭✭sutty


    Yeah we got this in work today, Thanks to the fast acting of my boss only about 5 mail's got out. Although one of them 5 was a software house, and the guy that opened it had contacts to all the newspaper companys in England and a load of other companys. After clearing out the Exchange and making a new .VBS detect script for mime sweeper, we broth up the servers again. and about 2000 mails tryed to get out. (we where very lucky that we got it right the first time) any way all is well now biggrin.gif
    Ciaran Sutcliffe
    aka: sutty
    [HIV]sutty
    For a good time goto:
    http://www.hotinternetvirgins.com


Advertisement