Telecom and Logistics Associates 

Security NEWs Service: TLAnews

publication: Christian ALT  new6.gif (1031 bytes) TLAalert    Security Service 
Translate this page from:  Save Time and Money 

26.5.2000 SecurityComputer Associates Warns Of New Virus
Computer Associates issued a warning Thursday about a precarious new polymorphic virus that spreads by attaching to outgoing Microsoft Outlook e-mail.

En français: Computer Associates avertit d'un nouveau virus
Computer Associates nous a avertit jeudi qu'un nouveau virus polymorphique se propage attaché à un message sortant de l'outil de messagerie Outlook de Microsoft.

 
English version
 The email arrives with a subject line "You’ve GOT Mail !!!" and the text of the message reads "Please, saved the document after you read and don’t show to anyone else. The document is also VIRUS FREE…so DISREGARD the virus protection warning !!!"

 

Résumé en français

Le message arrive avec le sujet: "You’ve GOT Mail !!!" et le texte du message contient Please, saved the document after you read and don’t show to anyone else. The document is also VIRUS FREE…so DISREGARD the virus protection warning !!!"

Le virus porte le now de Cybernet


Similar to the rash of the recent "Love" viruses, the new virus, named "Cybernet," attacks Microsoft Outlook, but it limits itself to 50 names in the address book.

The virus infects Word and Excel documents and is set to insert random shapes into Word or Excel documents on August 17th and December 25th, similar to the MELISSA virus. It also replicates via e-mail and has the potential to clog up organization's email systems.

The new virus is activated when the document, in which it is contained, is opened. The virus then uses Outlook to e-mail copies of itself to all the entries in the address book. The virus can also effect the Autoexec.bat command of computers using the Windows 98 operating system and can attempt to format the C: drive.

The bug was identified in the United Kingdom by Sophos. Content Technologies, the leading provider of content security solutions, had a solution within an hour for its six thousand world-wide customers of its e-mail security program, MAILsweeper.

"Cybernet has been reported in the field, and CA virus researchers are monitoring the situation closely," the company said.

According to Computer Associates (stock: CA), the infected e-mail arrives with a subject line "You've Got Mail!!!" and the enclosed message reads, "Please, saved [sic] the document after you read and don't show to anyone else. This document is also VIRUS FREE ...so DISREGARD the virus protection warning!!!"

Users who follow that advice will find the attachment tries to format their hard drive after their next reboot, Computer Associates said.

"Cybernet is reminiscent of the Melissa virus and has been awarded a medium risk by CA's antivirus staff," the company said. "It has the potential to overload e-mail servers due to the volume of mail sent out automatically. Unlike the VBS worms recently discovered, Cybernet infects Microsoft Word and Excel files."

Computer Associates International, Inc. (CA) is warning eBusinesses and home users of Cybernet, a dangerous new polymorphic virus that spreads by attaching to outgoing email. The virus sends itself to the first 50 entries found in a user's Microsoft Outlook address book. Cybernet has been reported to be "in the field" and CA virus researchers are monitoring the situation closely.

"Cybernet represents a high threat to all eBusinesses and home users due to its ability to completely flood mission-critical email networks," said Simon Perry, CA vice president, security solutions. "CA believes that by having generic solutions in place for new threats, such as the one offered by InoculateIT, computer users can stop the spread of new viruses and Worms before they are written."

 

 

Author information.
Copyright © [Telecom and Logistics Associates Sàrl]. All rights reserved.
Revised: mai 26, 2000 .

All information provided is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act upon such information without appropriate professional advice after a thorough examination of the facts of the particular situation.