MessageThis comes from a very well known computer tech. So believe it. ----- Original Message ----- From: Andi To: Mom Sent: Tuesday, April 29, 2003 2:39 PM Subject: Fw: new email worm ----- Original Message ----- From: mnicoletti@aplighting.com Sent: Tuesday, April 29, 2003 11:48 AM in the latest example of computer virus writers capitalizing on current events, a new email worm uses fears about SARS to entice users into opening a file attachment, infecting host machines and helping spread the virus to other machines on the Internet. The worm, W32/Coronex-A (Coronex), is a mass-mailer worm that uses Microsoft's Outlook e-mail application to send copies of itself to unsuspecting recipients, according to an alert from antivirus company Sophos. Coronex arrives as an attachment in email messages that carry a variety of subject lines and messages relating to SARS, or Severe Acute Respiratory Syndrome, the deadly new respiratory illness that has turned up in Asia, North America, and Europe. Greetings such as "SARS Virus," "I need your help," and "deaths virus," accompany messages containing the virus, according to antivirus software company Symantec. Attachments containing the virus with names like "sars.exe," "Hongkong.exe," and "deaths.exe" also play into media reports of the illness, which is concentrated in Asia, Sophos said. When opened, the attachment launches the virus, displaying a pop-up window with the message "corona virus." The Coronex virus modifies the Windows registry, adding an entry to ensure that it is launched whenever Windows starts, changing the start page for the Internet Explorer Web browser, and deriving the location of the Windows Address book. With the addresses in the Windows Address book, Coronex uses its own built-in SMTP (Simple Mail Transfer Protocol) engine to send copies of itself to the addresses. Sender addresses for those email messages include sars@hotmail.com, corona@hotmail.com, and deaths@china.com, Symantec said.