Medium Risk Alert: VBS_NUMGAME.A

[micael]

Trend Micro Medium Risk Virus Alert: VBS_NUMGAME.A

VBS_NUMGAME.A is a VBScript worm that propagates via MAPI by sending itself to every address listed in the infected user's address book. The email that this worm arrives in, is as follows:

Subject: Are you (Name) my valentine?

Message Body:
Hi (Name) my valentine, remember me? I ain't seen you in ages! Anyway, check-out and play the attached guess-the-number-game to guess who I am. See you soon, bye-bye!
Attachment: GuessGame.html or GuessGame.vbe

Upon execution, this worm deletes several files and folders in the c:\ drive and network drives.
The worm also tries to engage the infected user in a number-guessing game.

You can get more information regarding this worm from the Trend Micro Web site here.

[gold eagle]

thks micael for the warning. Didn't a version of this go around last year?

[micael]

Hello gold eagle,

I guess it'll show up new and destructive viruses every major holiday since the creators seems like to dedicate their virus to something (not much to be proud of though). Im not sure what virus you are thinking on, I did a quick check and found one similiar virus from the time around valentine last year, you can read more about it at NAI, its called VBS/Valentin@MM.

[gold eagle]

Hey micael. It's quiet tonight here.

That might be the one I'm thinking of...