Joke.exe Internet worm making the rounds again!

Question

Virus Alert! Joke.exe Hybris worm making the rounds!

Answer

This question was answered on May 4, 2001. Much of the information contained herein may have changed since posting.

A new version of an Internet worm discovered in November of 2000 is making the rounds with a slightly different look.

For the most part, this worm masquerades as a joke e-mail that pretends to start the joke in the message with the rest, presumably, in the attached file (joke.exe).

The message is as follows:

Subject: Hahaha [hahaha@sexyfun.net]

Message body: Today, Snowhite was turning 18. The 7 Dwarfs always where very educated and polite with Snowhite. When they go out work at mornign, they promissed a *huge* surprise. Snowhite was anxious. Suddlently, the door open, and the Seven Dwarfs enter...

Attached file: Joke.exe

The attachement contains the Hybris worm which can automatically spread itself to anyone in a Windows based address book.

Do not open the "joke.exe" attached file as it will launch the worm.

Signs of infection include a spiral that will randomly appear on your screen.

For a full technical description as well as removal instructions, go to:

<a href="http://vil.mcafee.com/dispVirus.asp?virus_k=98873&" target="_blank"><font color="#003399">>http://vil.mcafee.com/dispVirus.asp?virus_k=98873&</font></a>

Author

Posted by Ken of Data Doctors on May 4, 2001