This kit-generated worm fails to spread despite recent anthrax scares. The Anthrax email worm suffers from a delivery flaw and is not expected to infect many computer users.
Anthrax (vbs.vbswg.af@mm) is a kit-generated worm, meaning that its author constructed the worm using a program downloaded from the Internet. To prevent kit-generated worms, most antivirus software contains generic signatures that combat all worms constructed this way. The Anthrax worm does not delete files and is noteworthy only because of the public's concern over recent news regarding the actual disease. The Anthrax worm ranks as a 2 on the ZDNet Virus Meter.
The Anthrax email worm suffers from a delivery flaw and is not expected to infect many computer users. Anthrax (vbs.vbswg.af@mm) is a kit-generated worm, meaning that its author constructed the worm using a program downloaded from the Internet. To prevent kit-generated worms, most antivirus software contains generic signatures that combat all worms constructed this way. The Anthrax worm does not delete files and is noteworthy only because of the public's concern over recent news regarding the actual disease. The Anthrax worm ranks a 2 on the ZDNET Virus Meter.
How it works:
Anthrax can arrive either by email or Internet relay chat (IRC). The email's subject line reads "Antrax Info." The original body text is as follows: "Si no sabes que es el antrax o cuales son sus efectos aqui, te mando una foto para que veas los efectos que tiene. Nota: La foto esta un poco fuerte." The English translation is, "If you don't know what anthrax is or what the results of it are, please see the attached picture so that you can see the results that it has. Note: The picture is a little harsh." The attached file is called anthraxinfo.vbs. Because of a flaw in the worm itself, the attachment often is not available within the email message, therefore, the worm cannot infect your machine or spread.
mIRC or pIRC users are the most vulnerable to infection. If a new user joins a channel where an infected user is present, the new user will automatically receive an upload request. If the new user accepts that request, the Anthrax worm will infect his or her machine.
Removal:
Only a few antivirus vendors have posted signature updates for Anthrax. For more information on Anthrax, see Central Command and the Symantec site.
Prevention
Here are the basic steps for containing the latest worm:
1. Download Microsoft's Outlook Security Patch. If you haven't already installed it, download the Outlook 98 Security Patch or the Outlook 2000 Security Patch. Please note that this patch does not include Outlook Express.
2. Turn off Windows Scripting Host. Recent virus outbreaks have exploited known vulnerabilities in Visual Basic Scripting under Windows. To limit your risk of infection, you should turn off Windows Scripting Host.
3. "Don't open attachments!" One way to prevent virus infections is not to open attachments, especially when viruses such as this virus are being actively circulated. Even if the email is from a known source, be careful. A few viruses take the mailing lists from an infected computer and send out new messages with its destructive payload attached. Always scan the attached files first for viruses. Unless it's a file or an image you are expecting, delete it.
4. Stay informed. Did you know that there are virus and security alerts almost every day? Keep up-to-date on breaking viruses and solutions by bookmarking your vendors security web site, such as McAfee or Symantec.
5. Get protected. If you don't already have virus protection software on your machine, you should. If you're a home or individual user, it's as easy as downloading any of these top-rated programs then following the installation instructions. If you're on a network, check with your network administrator first.
6. Scan your system regularly. If you're just loading anti-virus software for the first time, it's a good idea to let it scan your entire system. It's better to start with your PC clean and free of virus problems. Often the antivirus program can be set to scan each time the computer is rebooted or on a periodic schedule. Some will scan in the background while you are connected to the Internet. Make it a regular habit to scan for viruses.
7. Update your antivirus software. Now that you have virus protection software installed, make sure it's up-to-date. Some antivirus protection programs have a feature that will automatically link to the Internet and add new virus detection code whenever the software vendor discovers a new threat.
Latest News:
New anthrax worm is a dud
1%
4%
