Virus

["Noel Bautro" <bautron@wchsys.org>]

A press release re: Kournikova.jpg.vbs as in the following messages:

13) Here you have, ;o)
	by "Stephanie Long" <long@sec-tn.com>
 14) Here you have, ;o)
	by "Tim Gillespie" <tgillespie@sec-tn.com>2/12/1 5:05 PM Inches: 12.2





REGULAR BC_TennisStarVirus_02_12_0515
<B>BC-Tennis Star Virus,0514
Virus spreads in guise of Kournikova photo
By ANICK JESDANUN
AP Internet Writer<P>
NEW YORK (AP) Ñ A computer virus circulated rapidly Monday in the guise of
an electronic photo of teen-age tennis star Anna Kournikova, overwhelming
e-mail servers throughout Europe and North America.
Within a few hours, the virus had managed to spread almost as rapidly as
last MayÕs ÔÔI Love YouÕÕ virus, which caused tens of millions of dollars in
damages worldwide. Anti-virus researchers expected more computer infections
during TuesdayÕs business day in Asia.
ÔÔEverybody and their brother and sister in law (are) infected with this
thing,ÕÕ said David Perry, director of public education at Trend Micro Inc.
ÔÔLast year, everybody wanted to be loved. Apparently many people want to
see a JPEG (picture) of Anna Kournikova.ÕÕ
Graham Cluley, senior technology consultant at Sophos Anti-Virus Inc., said
the virus writer skillfully combined ÔÔthe temptation of the teen-age tennis
star with the average fantasy of the guy who sits in front of the computer
terminal.ÕÕ
The virus is known as a worm because it can automatically send copies of
itself to everyone on a recipientÕs address book. That could be thousands of
copies per person for a larger corporation.
It only spreads through Microsoft Outlook e-mail software on Windows
computers, although Macintosh users and those using other e-mail programs
can still spread the virus manually.
Microsoft spokesman Adam Sohn said the company had released a security
update last June, shortly after the ÔÔI Love YouÕÕ virus spread using
similar techniques. That update generates a warning anytime a computer
program attempts to access OutlookÕs address book.
The virus appears to have originated in Europe.
Mikko Hypponen, manager of anti-virus research for F-Secure Corp., said the
virus does not permanently damange computers, but if left alone will try to
contact a Dutch Web site on Jan. 26, 2002.
The virus comes as an attachment named ÔÔAnnaKournikova.jpg.vbsÕÕ and
carries the message ÔÔHi: Check This!ÕÕ At least three subject lines have
been identified: ÔÔHere you have,ÕÕ ÔÔHere you goÕÕ and ÔÔHere you areÕÕ Ñ
all followed by a smiley face.
Many anti-virus companies have developed software updates to filter the new
virus, and many network administrators responded by configuring e-mail
servers to automatically reject the message.
A warning to Michican State University users was typical: ÔÔIf you receive
such a message, please DO NOT OPEN the attachment. Discard the message
immediately.ÕÕ
Vincent Weafer, director of the Symantec Anti-Virus Research Center, partly
attributed the virusÕs spread to timing.
ÔÔClose to ValentineÕs Day, anything novel or different like this will get
peopleÕs attention more than normal,ÕÕ he said. ÔÔThey are expecting
messages from friends, maybe pictures of each other or cards. People lower
their guards.ÕÕ
ÑÑÑ
On the Net:
F-Secure: http://www.fsecure.com/virus-info
Microsoft: http://www.microsoft.com

************************************************************************
The RADSAFE Frequently Asked Questions list, archives and subscription
information can be accessed at http://www.ehs.uiuc.edu/~rad/radsafe.html