Date: Tue, 13 Feb 2001 08:51:13 -0500 (EST) From: BCPL.NET SysAdmin To: BCPL.NET News Subject: BCPL.NET NEWS: Anna Kournikova E-Mail Worm ---------------------------- ANNA KOURNIKOVA E-MAIL Worm ---------------------------- Yet another e-mail worm is making the rounds. This one is popularly known as the "Anna Kournikova Worm" or "Anna Virus", but is also sometimes referred to as "VBS/SST@MM", "I-Worm.Lee.o", "VBS/VBSWG.J@MM, "SST", "VBS_Kalama" and possibly other names. The worm infects only Windows computers, and can be spread only by Windows computers that have the Outlook or Outlook Express e-mail programs. The worm arrives on your PC via e-mail with the following characteristics: > Subject: Here you have, ;o) > > Message Body: Hi: > Check This! > > Attachment: AnnaKournikova.jpg.vbs The attachment pretends to be a JPG image of tennis player Anna Kournikova, but is actually a Visual Basic Script. When opened it modifies the Windows Registry, then installs itself in the Windows directory. It then e-mails copies of the message and file attachment described above to every address in the Outlook address book. It then modifies the Registry again to prevent itself from mass-mailing again. It then sits quietly, waiting for the next January 26. On that date it attempt to connect your Web browser to an apparently innocent Web site in the Netherlands. The Anna Kournikova worm is non-destructive to the infected PC, but the huge numbers of e-mail messages it generates are beginning to clog e-mail systems. Several corporate e-mail systems have been brought to their knees by it. If you receive an e-mail with the characteristics described above, delete it. DO NOT open the file attachment! For more information see the following URLs: http://www.symantec.com/avcenter/venc/data/vbs.sst@mm.html http://vil.mcafee.com/dispVirus.asp?virus_k=99011& http://www.europe.f-secure.com/v-descs/onthefly.shtml -- BCPL.NET INTERNET SERVICES CONTACTS: ----------------------------------- Web Site: http://www.bcpl.net Administration & Policy: ispadmin@bcpl.net 410-887-6180 Sales, Renewals, Account Status: accounts@bcpl.net 410-887-4172 Technical Support (Help Desk): help@bcpl.net 410-887-3297 Usenet News Newsgroup Requests news-admin@bcpl.net 410-887-6180 E-Mail & Newsgroup Abuse Reports: abuse@bcpl.net 410-887-6180 Domain Name Service Issues: dnsadmin@bcpl.net 410-887-6180 FAX: 410-887-2091