Name:
W32/Babypic@mm
Characteristics:
This threat is detected by current engine and DAT files when scanned with program heuristics enabled as "New BackDoor".
This is an Internet worm written in Visual Basic. It is written to trick a user into thinking it is a joke however runs as a process after the user thinks the program has been closed, and sends to others using Outlook. An email message is sent to each user listed in the available address books approximately 10 minutes after first running this virus. This virus may arrive by email in this format:
Subject = "My baby pic!!!"
Body = "Its my animated baby picture!!"
Attachment = mybabypic.exe
The icon of the executable is a basic graphic with fuscia pink with a side profile face and border resembling a postage stamp, and the attachment is 78kb. This binary attachment will display an animated graphic, one of a baby in a baby crib with an adult-sized penis. The animation effect is that the penis is in two different positions.
Due to the graphic nature of this display, it is possible that users would manually and intentionally forward the attachment to others, in a gesture of passing along something "humurous".
Terry M. Hoey
th3856@txmail.sbc.com
Ever notice that by the time that you realize that you ran a truncate script on the wrong instance, it is too late to stop it?
W32/Babypic@mm
Characteristics:
This threat is detected by current engine and DAT files when scanned with program heuristics enabled as "New BackDoor".
This is an Internet worm written in Visual Basic. It is written to trick a user into thinking it is a joke however runs as a process after the user thinks the program has been closed, and sends to others using Outlook. An email message is sent to each user listed in the available address books approximately 10 minutes after first running this virus. This virus may arrive by email in this format:
Subject = "My baby pic!!!"
Body = "Its my animated baby picture!!"
Attachment = mybabypic.exe
The icon of the executable is a basic graphic with fuscia pink with a side profile face and border resembling a postage stamp, and the attachment is 78kb. This binary attachment will display an animated graphic, one of a baby in a baby crib with an adult-sized penis. The animation effect is that the penis is in two different positions.
Due to the graphic nature of this display, it is possible that users would manually and intentionally forward the attachment to others, in a gesture of passing along something "humurous".
Terry M. Hoey
th3856@txmail.sbc.com
Ever notice that by the time that you realize that you ran a truncate script on the wrong instance, it is too late to stop it?