World Cup email leads to virus penalty
A new virus could score a surpise goal against users looking for up-to-the-minute championship results during the FIFA World Cup.
According to antivirus firm Sophos, the VBS/Chick-F virus arrives via email as a compressed HTML file that carries the subject "RE: Korea Japan Results". Once the attachment is executed, the text "Enable activeX To See Korea Japan results" is displayed.
If ActiveX is enabled, the virus will search drives C, D and E for an Internet Relay Chat (IRC) executable file. Once located, the virus will be copied into the C drive as koreajapan.chm and propagate itself to users on the same IRC channel.
The virus will then send an email to the first entry in a user's Microsoft Outlook address book with the same subject line.
[ Read more ]
- Press Release: World Cup Virus Aims To Foul Football Fans (7 June 2002)
- Press Release: Sophos Warns Against Virus Own Goal During World Cup (21 May 2002)