Marijuana is a low-threat worm with a political agenda. Find out how to keep it from growing in your Inbox.

W32.Marijuana (W32.Mari) is a non-destructive worm with an agenda that will leave you dazed and confused. If you click on the attachment, Marijuana spreads to everyone listed in that user's Outlook address book. It will also change your default Internet Explorer page to a pro-marijuana Web site. At the moment, Marijuana is a low-threat.

How it works
Marijuana arrives as an email with the following information:

Subject: check this out!!!

Once installed, Marijuana sends copies of itself to all the address found in the infected computer's Outlook address book. The worm also puts a marijuana leaf icon on the system tray. If the infected user clicks on the icon, a pop-up dialog box displays with the following text:

I think i speak for every pot smoker in North America when i say: *Legalize Marijuana*...I mean if people with AIDS, Cancer and other deaises can use it then why cant the rest of us (pot smokers) use it?,I don't think that's very fair (Do you?). If it's legal to grow and use in places like: Australia (for personal use) then why not in North america? If doctors are useing it as a treament for illness then it must no be *THAT* harmful (So why can't other people use it?). I really do think the federal government should consider legalization of marijuana. Well that's really all i have to say on the matter, but i do hope somebody, somewhere listens to what i have to say and does not just regard this as just another *virus* because it's more than that, it's a message, a message for freedom, the freedom to smoke up and have the chose to do so *WITHOUT* fear of punishment from the law and the government. Thank you for your time.

Marijuana changes the default home page of Internet Explorer to a Web site promoting the legal use of marijuana, changes the Windows registration to "I'm a Pot Head," and the company to "Stoner's Pot Place."

Marijuana also triggers every afternoon at 4:20 with another dialog box that reads, "The Marijuana Virus!!" and includes the text, "It's 4:20, Time to toke up :)."

Removal and prevention

Most antivirus software companies are expected to update their signature files to include Marijuana. For more information on removing Marijuana from your system, see Sophos.

Prevention
Here are the basic steps for containing the latest worm:

1. Download Microsoft's Outlook Security Patch. If you haven't already installed it, download the Outlook 98 Security Patch or the Outlook 2000 Security Patch. Please note that this patch does not include Outlook Express.

2. Turn off Windows Scripting Host. Recent virus outbreaks have exploited known vulnerabilities in Visual Basic Scripting under Windows. To limit your risk of infection, you should turn off Windows Scripting Host.

3. "Don't open attachments!" One of the best ways to prevent virus infections is not to open attachments, especially when viruses such as this virus are being actively circulated. Even if the email is from a known source, be careful. A few viruses take the mailing lists from an infected computer and send out new messages with its destructive payload attached. Always scan the attached files first for viruses. Unless it's a file or an image you are expecting, delete it.

4. Stay informed. Did you know that there are virus and security alerts almost every day? Keep up-to-date on breaking viruses and solutions by bookmarking our Security page.

5. Get protected. If you don't already have virus protection software on your machine, you should. If you're a home or individual user, it's as easy as downloading any top-rated programs then following the installation instructions. If you're on a network, check with your network administrator first.

6. Scan your system regularly. If you're just loading anti-virus software for the first time, it's a good idea to let it scan your entire system. It's better to start with your PC clean and free of virus problems. Often the antivirus program can be set to scan each time the computer is rebooted or on a periodic schedule. Some will scan in the background while you are connected to the Internet. Make it a regular habit to scan for viruses.

7. Update your anti-virus software. Now that you have virus protection software installed, make sure it's up-to-date. Some antivirus protection programs have a feature that will automatically link to the Internet and add new virus detection code whenever the software vendor discovers a new threat. You can also scan your system for the lastest security updates here.