A Not-So-Funny Virus
This past weekend, a virus began to spring up in the form of a Microsoft Scrap Object File (file type extension .shs). This worm, know as Life_Stages or VBS.Stages, modifies the System Registry files, possibly disrupting operation of the computer system itself in addition to preventing editing of the registry. It may also overload mail servers because, like the Love Bug virus, it forwards itself to all of the addresses in the Microsoft Outlook and Outlook Express address books. The specs of this virus appear as follows:
- The attachment name for the host email is LIFE_STAGES.TXT.SHS. (Note that the .shs file extension does not appear, even in Windows Explorer, and the file type icon appears as a text file icon.)
- The subject will be constructed form these terms: FW, Funny, Jokes, Life Stages, Text.
- The body of the email may read: The male and female stages of life.
- When executed, the attachment will open a text file that contains the following:
- The male stages of life:
Age. Seduction lines.
17 My parents are away for the weekend.
25 My girlfriend is away for the weekend.
35 My fiancee is away for the weekend.
48 My wife is away for the weekend.
66 My second wife is dead.
Age. Favorite sport.
17 Sex.
25 Sex.
35 Sex.
48 Sex.
66 Napping.
Age. Definiton of a successful date.
17 Tongue.
25 Breakfast.
35 She didn't set back my therapy.
48 I didn't have to meet her kids.
66 Got home alive.
- The female stages of life:
Age. Favourite fantasy.
17 Tall, dark and hansome.
25 Tall, dark and hansome with money.
35 Tall, dark and hansome with money and a brain.
48 A man with hair.
66 A man.
Age. Ideal date.
17 He offers to pay.
25 He pays.
35 He cooks breakfast next morning.
48 He cooks breakfast next morning for the kids.
66 He can chew his breakfast.
An SHS file is a Microsoft Scrap Object file. These types of files are executable and can contain a wide variety of objects. This virus is dangerous because it does not display its true file type extension (.shs), even when viewed in Windows Explorer. Its file type extension and file type icon both make this attachment appear as if it were a true text (.txt) file. It is recommended that corporate users configure their email filtering systems to prevent emails that have attachments with .shs extensions.
Be sure to check with the manufacturer of your anti-virus software to download the latest virus definition files, or the virus removal tool. And, as always, beware of emails with attachments!
|
|
