SPEEDCRAVER

Expert Class
Posts: 183
|
posted October 24, 2002 12:21 PM
New ecard virus!!! Beware
Just a heads up for all of my 12R buds. I do not get back here during work hours lately, I have been too busy.
DO NOT ATTEMPT TO CLICK LINKS TO ANY E-CARD SITES!
There are at least 3 known variants of this in the wild. Anti-virus signatures may not alert on these yet!
Depending on the variant, the email may do one or more of the following:
1. The Virus/Trojan then replicates itself to everyone in your address book. The chances are high that you may receive this from someone you know.
2. The subject line may contain " you have an E-Card from
3. The body may contain "Greetings" has sent you an E-Card-a virtual postcard from FriendGreetings.com. You can pickup your E-Card at the FriendGreetings.com by clicking on the link below.
4. May contain a link to surprisecards.net.
4. The email link may prompt you to install an activex plugin to your computer. DO NOT DO THIS!
5. The Virus may implant a Trojan executable on your machine that contains malicious code to cause pornographic popups to appear on your computer.
5. The Virus/Trojan may take other malicious action on your computer including the deletion of files.
If you think you may have been infected by this virus, contact the helpdesk to clean your system.
A similar version was reported several days ago on the Security Focus and other Web sites.
For more information, go to:
http://online.securityfocus.com/news/1350
____________
I keep all of my guns loaded, to many people die from unloaded guns.
|
SPEEDCRAVER

Expert Class
Posts: 183
|
posted October 24, 2002 12:22 PM
Also, I am unable to find any removal info or new DAT files for detection, this is just to new.
Alan
____________
I keep all of my guns loaded, to many people die from unloaded guns.
|
ZX12Girl

Pro
Adrenaline Junkie
Posts: 1740
|
posted October 24, 2002 01:23 PM
Thanks for the heads up Speedcraver.
____________
Life is an adventure. Are you driving?
|
zxlnt

Needs a job
Kawpuke Extraordinare
Posts: 2853
|
posted October 24, 2002 03:30 PM
Well for grins I just updated my DAT files..
|
pat830
Expert Class
Posts: 135
|
posted October 25, 2002 09:52 AM
SOPHOS ADVISES ON UNWANTED "E-CARDS" FILLING EMAIL INBOXES
It's not a virus, it's not a worm.. but it could be considered a nuisance
Sophos technical support has received a significant number of calls from
customers concerned about a widespread email which invites users to pick up
an "E-Card" from a website called FriendGreetings.com.
If users follow the link in the email, they are invited to install an
ActiveX control onto their computer. An end-user license agreement (EULA)
is displayed stating that by installing the application the user is
giving permission to send a similar greeting card to all addresses found in
the user's Outlook address book.
Of course, many users will not read the EULA thoroughly and will simply
give permission for the ActiveX control to be installed, thus allowing
many unwanted emails to be sent.
The emails arrive with the following characteristics:
Subject:
you have an E-Card from
Body:
Greetings!
has sent you an E-Card - a virtual postcard from
FriendGreetings.com. You can pick up your E-Card at the
FriendGreetings.com by clicking on the link below.
Message:
----------------------------------------------------------
I sent you a greeting card. Please pick it up.
----------------------------------------------------------
It should be noted that this is not a virus or a worm, and that
the email has no attachment.
|
|
|