**Virus Alert: TROJ_MYBABYPIC.A ALERT **
TROJ_MYBABYPIC.A is currently spreading in the wild. This
Trojan propagates via MS Outlook as an EXE attachment. A sample of the email is
as follows:
Subject: My Babypic
Body: Its my animated baby picture!!!
Attachment: MYBABYPIC.EXE
When the EXE file is executed, a message box with the picture of a child is
displayed. When this message box is closed, the Trojan drops several copies of
itself in the Windows/System directory and adds several registry entries to
enable it to execute at each Windows start up. This Trojan needs Windows
Scripting Host to function and upon execution tries to connect to a certain web
site. In addition to this, the Trojan code also has some destructive payloads,
that range from overwriting files with certain extensions to deleting certain
files.
Should you receive an e-mail that contains this subject header, message, or the
attached file, DO NOT OPEN THE ATTACHMENT - PLEASE DELETE IT IMMEDIATELY.