~~~~~~~Forum Diskusi Software dan Internet untuk Kristen-Katolik~~~~~~~ Subject: [antivirus-mailing] VBS/Forgotten-A is a VBS worm VBS/Forgotten-A is a VBS worm which uses Microsoft Outlook to spread. The worm arrives in an HTML email message with no attachments. The subject of the message is "RE: Financing". The message body is set by the embedded VBScript. If the Internet security setting is configured to disallow the running of unsafe ActiveX controls the message text will be "You need ActiveX enabled if you want to see this e-mail. Please open this message again and click accept ActiveX Microsoft Outlook". If the running of unsafe ActiveX controls is enabled the message will be "YOU WILL NOT FORGET THIS MOMENT, NEVER!". The worm drops a VBScript file VB1.COM.VBS into the Windows system directory and runs it. This script attempts to create an email message with the worm VBS code embedded and send it to all contacts in the user's Outlook address book. The dropped VBS file also searches mapped drives, shared drives and all other active drives for files with the extension VBS or VBE and overwrites them with a copy of itself. If the PIRCH or mIRC IRC clients are installed the worm also drops scripts which attempt to send the dropped VBScript file to other mIRC users. ------ Hemat Bandwith : Hapus pesan yang tidak perlu sebelum reply ------ SUBSCRIBE---> To: [EMAIL PROTECTED], Isi/Body: kosong UNSUBSCRIBE---> To: [EMAIL PROTECTED], Isi/Body: kosong Moderator: Ronny <[EMAIL PROTECTED]>, Alex <[EMAIL PROTECTED]> Web : http://hub.xc.org/cgi-bin/lyris.pl?enter=i-kan-software
