![]() |
|
[ List Archives Home ] [ Thread index for 2008 ] [ Date index for 2008 ] [ Author index for 2008 ]
VBS.VBSWG2.X@mm sends itself to all recipients in your Microsoft Outlook address book. The email message has the following characteristics:
Subject: Homepage
Message:
Hi!
You've got to see this page! It's really cool ;O)
Attachment: Homepage.HTML.vbs
Prior to mailing itself out, the worm searches for email messages with the Subject of Homepage; if found, it deletes them. After mailing, the worm creates the registry key
HKEY_CURRENT_USER\Software\An\mailed
and sets it equal to "1". The presence of this registry key prevents the worm from running the email routine more than once.
The worm then randomly selects one of four pornographic Web pages and
opens it.
--
This message was distributed through the Innovative Users Group INNOPAC list.
Private replies: Jeffie Nicholson