Print

Print


Melissa-Like Virus Reemerges in Outlook

October 2, 1999
By CNET News.com

A computer virus that works in a similar fashion as the so-called Melissa virus has reemerged Friday for some users of Microsoft Outlook software.

Antivirus researchers said the virus has been in existence since July and has been named VBS.freelink. In order to work, the virus requires newer versions of Windows Visual Basic programming language, which means that Windows 95 computers aren't affected, said Steve Trilling of Symantec's antivirus lab.

Trilling said Symantec hasn't detected a resurgence of the virus.

The virus spreads by an email that contains a Visual Basic script file. If the attachment is opened, the file surreptitiously goes through a user's address book and sends the virus out like a chain mail to anyone listed in the user's address book.

The email carrying the bug can be identified by the subject line, which states, "Check this." The body of the email contains this message: "Have fun with these links. Bye."

Below that is a file called "links.vbs," which stands for Visual Basic script. If the file is opened by clicking on its icon, the virus runs and begins propagating.

An outside public relations representative associated with Microsoft had not heard of the problem but is looking into it.

The Melissa virus, which emerged on March 26, used a combination of Microsoft Word macros and Microsoft Outlook. Users would receive a disguised file, which contained a list of 80 pornographic Web sites. People who opened the file launched the virus, which then sent it to many people on the address list stored in Outlook.

The self-replicating nature of the virus led to email traffic clogs around the world as massive numbers of messages were sent as a result of the virus. Although Melissa itself did not attempt to corrupt files inside computers, later copycat versions did.

Roughly a week after Melissa emerged, authorities arrested the man suspected of starting the virus. The suspect, David Smith, admitted in court papers to have spread the virus using a stolen AOL account.


Copyright 1999 The New York Times Company
<http://www.nytimes.com/library/tech/99/10/biztech/articles/02virus.html>

janet paterson
52 now / 41 dx / 37 onset
613 256 8340 po box 171 almonte ontario canada K0A 1A0
a new voice: <http://www.geocities.com/SoHo/Village/6263/>
<[log in to unmask]>