Date: Wed, 10 Nov 1999 09:33:20 -0500
Reply-To: "Cort, Joel" <Joel.Cort@USA.XEROX.COM>
Sender: Vanagon Mailing List <vanagon@gerry.vanagon.com>
From: "Cort, Joel" <Joel.Cort@USA.XEROX.COM>
Subject: Alert New E-mail virus "Bubbleboy is back!" - NO VANAGON Content
Content-type: text/plain; charset=iso-8859-1
Listees,
SORRY for the bandwidth
Of concern today is the Bubbleboy virus. It is an email virus with active
content and no attachment. I you receive the email and read the message you
are infected. The virus then can replicate itself to everyone on your
personal address book. So the potential is there for a true epidemic.
Hey we ought to have a virus named after us such as VanaBoy or WestyBoy or
?? and a little van would travel around your screen, stop and camp out with
full pop top, drive very slow up the screen, and finally gush (blue) coolant
and wipe your screen clean. Ah ah ah - I guess Virus inventors don't drive
Vanagons!
- Syncro Westy Boy
----------------------------------------------------------------------------
---------------------------------
But seriously more details on Bubbleboy and the fixes at :
http://www.internetofficenews.com/ <http://www.internetofficenews.com/>
New E-mail virus named after a ''Seinfeld'' episode - Associated Press
SAN FRANCISCO -- A dangerous new type of e-mail virus emerged on Tuesday
that is able to destroy information on computers even when users are careful
not to fully open the messages.
The virus, nicknamed "Bubbleboy" after an episode of the TV show "Seinfeld,"
<snip>
http://www.mcafee.com/viruses/bubbleboy/
<http://www.mcafee.com/viruses/bubbleboy/>
VBS/Bubbleboy is a NEW type of worm: Unlike previous worms transmitted
through email, this new type of worm does not come as an executable
attachment. Instead, VBS/Bubbleboy infects PCs as soon as the transmitting
email message is opened. This is a VERY significant innovation! Virus
researchers have long assured the public that it is not possible to contract
a virus or worm merely by opening and reading an email message. This is no
longer true, and VBS/Bubbleboy marks the beginning of a more dangerous
computing environment.
VBS/Bubbleboy is transmitted through an email message with the subject
heading "Bubbleboy is back!" It will ONLY infect PCs running Windows 98 with
Internet Explorer 5 and Outlook or Outlook Express. PCs using Outlook are
infected upon opening the email message, while Outlook Express users may be
infected by viewing the message with Outlook's "Preview Pane" feature! When
the email is opened, the worm creates a file called UPDATE.HTA. The next
time the PC is booted up, the worm sends itself embedded in an email to
EVERY address in EVERY MS Outlook address book on the local system. It does
this only once.
<snip>
Thanks,
Joel B. Cort
Xerox TSI
Corporate Information Security
161 Chestnut Street
Building 875 - 2A
Rochester, NY 14604
* (716) 423-3851
* joel.cort@usa.xerox.com <***********************>