Saturday, April 28, 2001, 9:53:17 PM, ANT-ilic wrote:
> Hello Everybody!
> Recently I found out about this worm so here goes some info
> (hope you don't mind because I posted this to both lists):
> <Worm info>
> 1. Beware of the Internet-worm "Stator"
> The first harmful program spreading via the popular e-mail "The Bat!"
> has been detected.
> Kaspersky Lab, an international data-security software-development
> company, warns users of the discovery "in the wild" of the first
> Internet-worm, going by the name of "Stator," utilizing the popular
> e-mail client "The Bat!" in order to spread.
> Because of advanced functioning facilities, flexible set-up, and
> affordable price, "The Bat!" has become very popular amongst
> experienced Internet users in the past few years, particularly in
> Central and Eastern Europe. Until recently, the main advantage of this
> e-mail program was the absence of any harmful code in its
> applications.
> "In essence, Stator is simply the continuation of the computer
> underground attacking users, proving the well-known rule that the more
> popular the application, the more attention virus writers will pay to
> it," commented Denis Zenkin, Head of Corporate Communications for
> Kaspersky Labs.
> Protection against the "Stator" Internet-worm has already been added
> to the KasperskyTM Anti-Virus daily database update. Users, especially
> those using "The Bat!", are highly recommended to download this latest
> update.
> Technical Details
> This Internet-worm utilizes the e-mail client "The Bat!" in order to
> spread. It gains access to the database, searches for the e-mail
> addresses contained there, and sends out its copy to them in the form
> of an attachment to an e-mail.
> The worm's copy contains the name "photo1.jpg.pif" and contains the
> photo of an unknown young woman sitting next to a likeness of the
> well-known MacDonald's restaurant mascot, Ronald MacDonald. The
> message body is written in Russian in the Cyrillic alphabet.
> The translated text appears as follows:
[snip]
I have to wonder, does this file have to be opened by hand (by
the user) or does The Bat! foolishly open automatically ?
If user is needed to open the file then common sense should tell
us not to open the attachment. Loveletter is a good example to
remember in this case.
Also the fact that it got in the wild shows us that "we never
learn!", they fool us with the same old tricks again and again.
Shame on us!
--
If Bill Gates had a dime for every time a Windows box crashed...
...Oh wait, he already does.
--
______________________________________________________
Archives : <http://tbtech.thebat.dutaint.com>
Moderators : <mailto:[EMAIL PROTECTED]>
Unsubscribe: <mailto:[EMAIL PROTECTED]>
You are subscribed as : [email protected]
