topics that matter; ideas worth sharing

share a tip, submit a link, add something new

Home Page virus spreads from Australia to U.S.

May 10, 2001, 09:21 AM —  Network World — 

Antivirus software vendors Wednesday warned corporations to advise their employees about an e-mail borne computer virus, dubbed "Home Page," that points the victim's Web browser to a pornographic Web site when the e-mail attachment is opened.

The Home Page virus arrives with the subject line "Hi" and the message "You got to see this page, it's really cool." Attached to the message is an HTML.vbs file that when opened, launches the victim's browser to visit any of four porn sites. It also mails itself to other victims by grabbing addresses out of Microsoft Outlook, according to antivirus vendors. The vendors claim the virus has spread rapidly from where it was first noticed in Australia, across the Atlantic and to the U.S.

"Home Page uses the same VBS worm generator as the Anna Kournikova virus, which carried a txt.vbs attachment," says Graham Cluley, senior technology consultant at Sophos Anti-Virus, which has updated its antivirus software to detect and eradicate Home Page.

While Home Page isn't known to wipe out computer files, the "pain of this virus is the sheer amounts of e-mail it can create," Cluley says. This can result in what amounts to a denial-of-service attack that can bring down mail servers.

Home Page points to www.hardcore.pornbillboard.net, www.members.nbci.com, www.ww2.sexcropolis.com and www.sheila.issexy.tv, but the intent appears random rather than an attempt to generate traffic for any particular Web site, Cluley says. "It's probably just some kid who's created this virus," he says.

Corporations that might fall victim to Home Page should heed the lesson learned in the mammoth LoveBug attack of the past year, which also wreaked havoc with VBS scripts. That lesson is: "You may want to block every VBS file coming into your company," Cluley concluded.

» posted by ITworld staff

Network World

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
Resources
White Paper

Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.

Webcast

Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.

White Paper

Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.

Free stuff
Featured Sponsor

Get a broad understanding of important regulations and how you can make sure your site is in adherence.





Learn how VeriSign SGC-enabled SSL Certificates can help improve site security and customer confidence in the free white paper, "How to Offer the Strongest SSL Encryption." In this paper you will learn the differences between weak and strong encryption and what they mean for your site's performance.

Get VeriSign's free white paper: "The Latest Advancements in SSL Technology" and learn about the benefits of strong SSL encryption, Extended Validation (EV) SSL and security trust marks and what these SSL offerings can do for your site.

Now with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in this free VeriSign white paper.

More Resources