Injustice
The VBS Staple.a worm, also known as the Injustice Virus, represents the latest strike in the online battle between supporters of the Palestinians and supporters of the Israelis. Upon infection, the worm displays a Pro-Palestinian message, and then takes advantage of Outlook to send Pro-Palestinian email messages to the first 50 people listed in the Outlook Contact list, as well as to 25 Israeli organizations and government agencies. The virus also opens several instances of Internet Explorer and attempts to connect to a half dozen Pro-Palestinian web sites. This virus does not damage the infected computer. It is simply a vehicle for a political message.
Here are the virus's characteristics:
- Subject: Re:Injustice
- Message Body:
Dear <email address>/ <Sir>
Did you send the attached message, I was not expecting this from you !
- Attachment Name: injustice.TXT.vbs
Upon activation, the Injustice Virus opens a message box with the title "HELP US TO STOP THE BLOOD SHED!!" that contains the following message:
PLEASE ACCEPT MY APOLOGIES FOR DISTURBING YOU.
Remember that one day YOU may be in this situation. We need every possible help. Israeli soldiers killed in cold blood 12 year old Palestinian child Mohammad Al-Durra, as his father tried to protect him in vain with his own body. As a result of the indiscriminate and excessive use of machine gun fire by Israeli soldiers, journalists and bystanders watched helplessly as the child was savagely murdered. Palestinian Red Crescent Society medic Bassam Balbeisi attempted to intervene and spare the child's life but live ammunition to his chest by Israeli fire took his life in the process. The child and the medic were grotesquely murdered in cold blood. Mohammad's father, Jamal, was critically injured and permanently paralyzed. Similarly, approximately 40 children were slain, without the media taking notice or covering these tragedies.
THESE CRIMINAL ACTS CANNOT BE FORGIVEN OR FORGOTTEN!!!! HELP US TO STOP THE BLOOD SHED!!
This virus, in addition to mailing itself to the first 50 entries in the Outlook Contacts list, also sends itself to these Israeli organizations:
sar@mod.gov.il
sar@mops.gov.il
sar@moin.gov.il
yor@knesset.gov.il
webmaster@israel.com
amuta@ehudbarak.co.il
foundation@habonimdror.org,
wlzm@jazo.org.il
office@JAFI.org.il
naamatusa@naamat.org
info@azm.org
arie@kba.org
ncli@laborisrael.org
holyland@inisrael.com
sar@mof.gov.il
hachnasot@mof.gov.il
doar@mof.gov.il
mafkal@police.gov.il
yor@knesset.gov.il rmarkus@parliament.gov.il
doar@shaam.gov.il
sar@mops.gov.il
hashkal@mof.gov.il
pniotmas@mof.gov.il
menahel@shaam.gov.il
And finally, the virus opens several instances of Internet Explorer in an attempt to connect to these Pro-Palestinian web sites:
http://www.sabra-shatila.org/
http://www.petitiononline.com/palpet/petition.html
http://www.palestine-info.org
http://freesaj.org.uk/
http://hanthala.virtualave.net/
http://www.ummah.net/unity/palestine/index.htm
Be sure to visit your anti-virus software vendor's web site to update your virus definition files.
|
|
