Back to the main page

Mailing List Logs for ShadowRN

Message no. 1
From: dbuehrer@****.org dbuehrer@****.org
Subject: [GridSec] Email Virus Warning
Date: Thu, 11 Nov 1999 09:36:52 -0700
This one is for real. Course, you only have to worry if you're using
Win98, IE5, and Outlook (or Outlook Express). But still... <shrug>.


VBS/Bubbleboy is a new Internet worm, discovered 11/08/99. AVERT has
assigned it a LOW risk assessment; it has not appeared in the wild.

VBS/Bubbleboy is a NEW type of worm: Unlike previous worms transmitted
through email, this new type of worm does not come as an executable
attachment. Instead, VBS/Bubbleboy infects PCs as soon as the transmitting
email message is opened. This is a VERY significant innovation! In the
past, it was not possible to contract a virus or worm merely by opening and
reading an email message. This is no longer true, and VBS/Bubbleboy marks
the beginning of a more dangerous computing environment.

VBS/Bubbleboy is transmitted through an email message with the subject
heading "Bubbleboy is back!" It will ONLY infect PCs running Windows 98
with Internet Explorer 5 and Outlook or Outlook Express. PCs using Outlook
are infected upon opening the email message, while Outlook Express users
may be infected by viewing the message with Outlook Express's "Preview
Pane" feature! When the email is opened, the worm creates a file called
UPDATE.HTA. The next time the PC is booted up, the worm sends itself
embedded in an email to EVERY address in EVERY MS Outlook address book on
the local system. It does this only once.

Your friendly neighborhood ShadowRN GridSec Assistant
Other GridSec Assistants
-Dvixen <dvixen@****.com>
-Gurth <gurth@******.nl>
-Marc Renouf <renouf@********.com>
ShadowRN Admin
-Adam Jury <adamj@*********.HTML.COM>
ShadowRN Owner
-Mark Imbriaco <mark@*********, mark.imbriaco@*****.com>
ShadowRN FAQúqsrn
Message no. 2
From: Adam J adamj@*********
Subject: [GridSec] Email Virus Warning
Date: Thu, 11 Nov 1999 09:54:59 -0700
At 09:36 11/11/99 -0700, dbuehrer@****.org wrote:
>This one is for real. Course, you only have to worry if you're using
>Win98, IE5, and Outlook (or Outlook Express). But still... <shrug>.

Just a note that this virus has NOT been found "in the wild", so there is
currently no threat of being infected with it.

< adamj@********* / >
< ICQ# 2350330 / ShadowFAQ: >
< ShadowRN Assistant Fearless Leader / Shadowrun Creative Resources >
< FreeRPG & Shadowrun Webring Co-Admin / The Shadowrun Supplemental >

Further Reading

If you enjoyed reading about [GridSec] Email Virus Warning, you may also be interested in:


These messages were posted a long time ago on a mailing list far, far away. The copyright to their contents probably lies with the original authors of the individual messages, but since they were published in an electronic forum that anyone could subscribe to, and the logs were available to subscribers and most likely non-subscribers as well, it's felt that re-publishing them here is a kind of public service.