New Virus Alert - Low Threat But none the less a new virus

[KAZMAN]

Here is the Virus Summary from Mcafee and what it does..

Peter
====================


AVERT was first in discovering this threat on March 19,2001.
This is a VBScript virus which uses instructions to send copies of itself via Outlook.

The script when run contains instructions to do the following:

* writes itselt to the Windows\system\injustice.TXT.vbs using environment variables

* sends message to first 50 recipients in this format:

Subject = "RE:Injustice"
Body =
Dear (contact name),
Did you send the attached message, I was not expecting this from you !
Attachments = injustice.TXT.vbs

* it sends itself to several other email recipients, in separate messages, in the same format:


[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now]
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now]
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now]
[Only registered and activated users can see links. Either login above or Register Now]
[Only registered and activated users can see links. Either login above or Register Now]
[Only registered and activated users can see links. Either login above or Register Now]
[Only registered and activated users can see links. Either login above or Register Now]
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
[Only registered and activated users can see links. Either login above or Register Now].il
* displays this message:


"PLEASE ACCEPT MY APOLOGIES FOR DISTURBING YOU. "
"Remember that one day YOU may be in this situation. "
"We need every possible help. "
"Israeli soldiers killed in cold blood 12 year old Palestinian child"
"Mohammad Al-Durra, as his father tried to protect him in vain with"
"his own body. As a result of the indiscriminate and excessive use of"
"machine gun fire by Israeli soldiers, journalists and bystanders"
"watched helplessly as the child was savagely murdered."
"Palestinian Red Crescent Society medic Bassam Balbeisi"
"attempted to intervene and spare the child's life but live"
"ammunition to his chest by Israeli fire took his life in the process."
"The child and the medic were grotesquely murdered in cold blood."
"Mohammad's father, Jamal, was critically injured and permanently"
"paralyzed. Similarly, approximately 40 children were slain, without"
"the media taking notice or covering these tragedies. "
"THESE CRIMINAL ACTS CANNOT BE FORGIVEN OR FORGOTTEN!!!!"
" HELP US TO STOP THE BLOOD SHED!! "

* several instances of Internet Explorer are started to several websites:
"http://www.sabra-shatila.org/"
"http://www.petitiononline.com/palpet/petition.html"
"http://www.palestine-info.org"
"http://freesaj.org.uk/"
"http://hanthala.virtualave.net/"
"http://www.ummah.net/unity/palestine/index.htm"

[sweetcindy]

Thanks for the heads up Kazman...