A new worm is currently in circulation under the guise of a caricature attachment of Bill Clinton. Users are advised to look out for an email with the subject line “bill caricature” and an attached file named “cari.scr”.
The worm was first detected in the UK and has been detected on over 2000 occasions. The message of the body, if you’re unlucky enough to open it, reads:
Hiiiii
How are youuuuuuuu?
look to bill caricature it’s vvvery verrrry ffffunny : - ) : - )
i promise you will love it? ok
buy
= = = = = =No Viruse Found = = = = = =
MCAFFE.COM
The last line is a poor attempt in fooling victims that the email has been virus checked, as the writer miss-spells the word virus.
Once the email is opened, a .GIF picture appears which triggers the worm to be sent to everyone listed in the user’s inbox using Microsoft Outlook. The worm will then go on to delete all files with the extension:
.SYS
.VXD
.OCX
.NLS
and files from the following locations:
c:*.*
d:*.*
e:*.*
f:*.*
