http://netscape.zdnet.com/zdhelp/stories/main/0,5594,2688521,00.html
--
Jan Knepper
Smartsoft, LLC
88 Petersburg Road
Petersburg, NJ 08270
U.S.A.
http://www.smartsoft.cc/
http://www.mp3.com/pianoprincess
Phone : 609-628-4260
FAX : 609-628-1267
FAX : 303-845-6415 http://www.fax4free.com/
Phone : 020-873-3837 http://www.xoip.nl/ (Dutch)
FAX : 020-873-3837 http://www.xoip.nl/ (Dutch)
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <[EMAIL PROTECTED]>
Title: ZDNet: Help & How-To: NakedWife worm deletes Windows files
 |
 |

|
NakedWife worm deletes Windows files
By Robert Vamosi, Help & How-To

Alias JibJab, this e-mail worm can prevent you from opening applications.
March 6, 2001, revised
NakedWife is a new VBS worm that is spreading rapidly via e-mail. NakedWife (alias JibJab) also deletes important files from your Windows and System folders. Antivirus software vendors are receiving reports from within the United States, but it is too early to assess how quickly NakedWife is spreading. It currently ranks as a 6 on the ZDNet Virus Meter.
How It Works
NakedWife arrives as an e-mail with the following:
Subject: FW: Naked Wife
Body: My wife never look like that :)
Best Regards,
(Sender)
Attached: NakedWife.exe
If the user clicks the attachment, the worm will e-mail itself to all the addresses in the Outlook Address Book. It will also load a Flash window that will display the following message:
Figure A: NakedWife pretends to load a Flash movie. Source: Central Command
While the above image is on the screen, NakedWife deletes files with the following extensions:
DLL, INI, EXE, BMP, and COM
NakedWife will then display the following message:
You're now F#*#ED! © 2001 by BGK (Bill Gates Killer)
|
|
Next
|
>
|
|
Removal and prevention |

|
 |
Next
|
>
|
Removal and prevention |
|
Best Resources
|
 |
|
Copyright © 2001 ZD Inc. ZDNet is a registered service mark of ZD Inc. ZDNet Logo is a service mark of ZD Inc.
|
|
|