Beware the e-Card worm from FriendGreetings.com

Question

Beware the e-Card worm from FriendGreetings.com

Answer

This question was answered on November 16, 2002. Much of the information contained herein may have changed since posting.

A message that claims to be an e-card (electronic greeting card) is in widespread distribution and appears to be carrying a worm.

The e-card has the following characteristics:

Subject: %recipient% you have an E-Card from %sender%.

Message:

Greetings!

%sender% has sent you an E-Card -- a virtual postcard from FriendGreetings.com. You

can pickup your E-Card at the FriendGreetings.com by clicking on the link

below.

http:/ /www.friendgreetings.com/pickup/pickup.aspx?<extra content removed>

Message:

------------------------------------------------------------

%recipient%

I sent you a greeting card. Please pick it up.

%sender%

------------------------------------------------------------

DO NOT FOLLOW THE LINK OR DOWNLOAD THE PLUG-IN THAT APPEARS ON YOUR SCREEN IF YOU DO!

For removal instructions as well as the specific information (including screen shots) of what to watch for at the Symantec (Norton AntiVirus) web site located at:

>http://securityresponse.symantec.com/avcenter/venc/data/friendgreetings.html</b>

Author

Posted by Ken of Data Doctors on November 16, 2002