--0-1080791437-1001449589=:4237 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Content-Disposition: inline Note: forwarded message attached. ____________________________________________________________ Do You Yahoo!? Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk or your free @yahoo.ie address at http://mail.yahoo.ie --0-1080791437-1001449589=:4237 Content-Type: message/rfc822 X-Apparently-To: jinxs104@yahoo.co.uk via web10505; 25 Sep 2001 04:57:19 -0700 (PDT) X-Track: 1: 40 Received: from exchange.sihe.ac.uk (193.62.88.10) by mta517.mail.yahoo.com with SMTP; 25 Sep 2001 04:57:19 -0700 (PDT) Received: by exchange.sihe.ac.uk with Internet Mail Service (5.5.2653.19) id <SV0WHBRX>; Tue, 25 Sep 2001 12:56:21 +0100 Message-ID: <5406402BA6A3D51188A900B0D0D1003E27FC0E@exchange.sihe.ac.uk> From: "Jenkins, Glen" <glen.jenkins@sihe.ac.uk> To: "'jinxs104@yahoo.co.uk'" <jinxs104@yahoo.co.uk> Subject: FW: Be on the Alert - Yet a new virus Date: Tue, 25 Sep 2001 12:56:15 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Length: 2511 > ---------- > From: All Staff Distributor > Sent: 25 September 2001 11:23 > To: All Staff Group; All Students > Subject: Be on the Alert - Yet a new virus >=20 > 'Vote virus' poses as plea for peace > By Robert Lemos > ZDNet News=20 > September 24, 2001 3:00 PM PT >=20 > Security experts on Monday warned of a new file-deleting virus > masquerading as a program that allows people to vote on whether the = United > States should go to war.=20 > The "Vote Virus" is spreading via e-mail to users of Microsoft's = Outlook > e-mail program, said Simon Perry, vice president of security = solutions at > Computer Associates International.=20 > The virus appears with the subject line: "Peace between America and > Islam!" and the body of the e-mail reads: "Hi. Is it a war against = America > or Islam!? Let's vote to live in peace!" Perry said.=20 > When the attachment entitled "WTC.exe" is opened, the virus deletes = all > the files on the computer's hard drive and sends copies of the = original > e-mail message to every address listed in the computer's address = book, he > said >=20 > The virus also defaces any Web pages that are hosted by an infected > computer to read: "America...few days will show you what we can do!!! = It's > our turn Zaker is so sorry for you."=20 > The virus is believed to be the work of an opportunist and not = associated > with the Sept. 11 jetliner attacks on the World Trade Center and the > Pentagon that left more than 6,000 people dead or missing.=20 > "There is no evidence that this is related to the people who carried = out" > the attacks, Perry said.=20 > "We feel this is likely to get quite a high pickup in that a lot of = people > are going to click on this," he said. "If the news about this doesn't = get > out before people get their e-mails, they're at risk."=20 > Perry said he expects there will be more socially engineered viruses > created in the future that will take advantage of people's interest = in the > attacks and the subsequent political and military repercussions.=20 > "What this is, is a sick sense of humor," Perry said. "Chances are = this is > not any kind of cyberterrorism. It's just cyberterror."=20 > As many as 10 large corporate customers of Computer Associates have = been > infected since the virus first appeared Monday morning, Perry said. > Researchers do not know where it originated, but it has not yet hit = Europe > and Asia, he said.=20 > Story Copyright =A9 2001 Reuters Limited. All rights reserved.=20 >=20 >=20 --0-1080791437-1001449589=:4237--
The virus mentioned in the original is real. I just wanted to provide a link to additional information at Norton's site: http://www.symantec.com/avcenter/venc/data/w32.vote.a@mm.html The key is the quirky capitalization: The infected e-mail's subject line reads "Peace BeTween AmeriCa And IsLam!" and the message reads as follows: "Hi! iS iT A waR Against AmeriCa Or IsLam! Let's Vote To Live in Peace!" Also, please be aware that the BadTrans virus that was causing problems on mailing lists, this one included, is not dead. If you have not got a virus program and you don't update it every week and, ideally, have it set to scan your messages as they are downloaded and/or opened you are leaving the door open. No need to discuss this further on the list, however. Susan