Don't forget to be blocking those VBS attachments friends! -----Original Message----- From: David N. Precht [mailto:[EMAIL PROTECTED]] Sent: Monday, December 17, 2001 5:28 AM To: Windows Security Issues Subject: Fw: Sophos Anti-Virus IDE alert: VBS/Grate-B
Anyone see this yet ? ----- Original Message ----- From: "Sophos Alert System" <[EMAIL PROTECTED]> To: <Undisclosed recipients:> Sent: Monday, December 17, 2001 06:29 Subject: Sophos Anti-Virus IDE alert: VBS/Grate-B > > Name: VBS/Grate-B > Type: Visual Basic Script worm > Date: 17 December 2001 > > A virus identity file (IDE) which provides protection is > available now from our website and will be incorporated > into the February 2002 (3.54) release of Sophos Anti-Virus. > > At the time of writing Sophos has received just one report of > this worm from the wild. > > Description: > > VBS/Grate-B arrives in a email with the subject line "Merry > Christmas!!!" and no body text. The attachment is called > greetings.txt.vbs. > > When executed, the worm attempts to copy itself to the Cursors > folder in the Windows directory as greetings.txt.vbs. It also > tries to mail itself to everyone in all Outlook addresss books, > using the email format described above, and attempts to mail PWL > files to an email account in Poland. > > > Download the IDE file from > http://www.sophos.com/downloads/ide/grate-b.ide > > Read the analysis at > http://www.sophos.com/virusinfo/analyses/vbsgrateb.html > > Download a ZIP file containing all the IDE files available for > the current version of Sophos Anti-Virus from > http://www.sophos.com/downloads/ide/ides.zip > > Read about how to use IDE files at > http://www.sophos.com/downloads/ide/using.html > > To unsubscribe from this service please visit > http://www.sophos.com/virusinfo/notifications > _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com http://www.sunbelt-software.com/win-security_list_charter.htm _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
