View Full Version : Beware! New worm coming!

John Gearing
02-24-2003, 06:53 PM
A new worm has started up on the net today, in Asia and Europe. Watch out!

02-24-2003, 06:55 PM
From the above site:

The worm is primarily affecting users of Microsoft Outlook and Outlook Express e-mail programs. It can propagate itself through Outlook e-mail, but recipients may be users of any e-mail program.

Trend Micro representatives say the virus disguises itself as legitimate e-mail by replying to an existing e-mail message in your in-box, not simply by drawing on addresses in your address box.

The company provided an example of a legitimate e-mail message sent to an infected user, concerning something business related, that is answered by the worm with the message, "I'll try to respond as soon as possible. Take a look to [sic] the attachment and send me your opinion!" Users will often click on this attachment, since it appears to come from a person they know, Trend Micro said.

Clicking on the attachment sends the malicious code into several executable files on a user's system. It resides in a PC's system folder under any of several names, including WinRpcsrv.e, syshelp.exe, winrpc.exe, WinGate.exe, and rpcsrv.exe, according to Trend Micro.