Hi Ben, Slashdot is reporting on this too. The Slashdot Headline is:
"First Worm with a EULA" (End User License Agreement). "There is a new virtual postcard from Friend Greetings, owned by Permissioned Media that prompts you to install their software to view the card. You are then presented with a EULA granting them permission to e-mail all the Contacts in your Outlook Address Book. Those people are presented with an e-mail from you telling them they have a greeting card to pick up. So, this thing spreads like a worm, but includes a EULA that 95% of users won't take the time to read. Symantec isn't detecting this as a virus, but does have information about it on their site. In addition to the worm-like way it spreads, it also installs spyware designed to deliver ads to your computer. You also give them permission to install further software any time they want. In my opinion this is completely nasty, but it's all clearly in the EULA that you must agree to before it installs the software." http://slashdot.org/articles/02/10/25/1636215.shtml?tid=95 ----- Original Message ----- From: "Ben Johansen" <[EMAIL PROTECTED]> To: "Multiple recipients of list witango-talk" <[EMAIL PROTECTED]> Sent: Friday, October 25, 2002 7:04 PM Subject: Witango-Talk: ** Virus Alert ** > On October 24, 2002 a virus began to spread which has since been named the > "Friend Greeting Application" worm. At this time, the Virus has not received > a rating from the McAfee AVERT research team. > > Virus Description > The virus appears to be spreading via email, carrying a link to an E-card > site. It seems when end-users click on this link the email is propagated to > a random number of email addresses in your Outlook mailbox. At the same > time, the virus appears to disassociate the files on your computer from > their respective applications, making it difficult to access files on your > hard disk. > > Proposed Remedy > (1) Instruct your users not to click on the URL link inside a message with > the Subject "... you have an E-Card from ..." > > (2) If you have Content Filter enabled you can block access to > friendgreetings.com and friendlygreetings.com > > Ben Johansen - http://www.pcforge.com > Authorized WiTango Reseller > http://www.pcforge.com/WitangoGoodies.htm > latest beta downloads @ http://www.witango.ws > > ________________________________________________________________________ > TO UNSUBSCRIBE: send a plain text/US ASCII email to [EMAIL PROTECTED] > with unsubscribe witango-talk in the message body ________________________________________________________________________ TO UNSUBSCRIBE: send a plain text/US ASCII email to [EMAIL PROTECTED] with unsubscribe witango-talk in the message body
