Melissa variant pokes fun at Gates

A new variant of the Melissa virus, called VBS.Monopoly and specifically targeting Microsoft CEO Bill Gates, has been posted to virus list sites and is purported to be spreading across networks.

VBS.Monopoly spreads using the MS Outlook client, but unlike Melissa it utilises and was created with Visual Basic Script instead of MS Office Macros, according to ThunderStore, an antivirus company in the Netherlands, which posted an alert regarding the virus.

Supposedly spreading through e-mail, an infected message contains the subject line "Bill Gates joke", the message "Bill Gates is guilty of monopoly. Here is the proof. ;-)", and an image of Gates' face on a monopoly board. However, like Melissa, the virus will then send itself to all addresses in the Outlook address book.

VBS.Monopoly will also send another message to several public mail boxes at monopoly@mixmail.com, monopoly@telebot.com, monopoly@ciudad.com.ar, mloponoy@usa.net and yloponom@gnwmail.com. In this message, the virus will send a list of names and addresses from the Outlook address book, as well as information from the infected user's computer. The virus also modifies the system registry so that the information will not be sent again if a client is re-infected.

When the e-mail attachment Monopoly.vbs is activated by users, it creates the image file monopoly.jpg in a temporary folder, as well as a monopoly.wsh file and monopoly.vbe. The VBE file contains an encrypted VBScript and is executed with the WSH file, according to ThunderStore.

Not all antivirus vendors are overly worried about VBS.Monopoly, however, as they have not as yet received any cases of infections through their users or that the virus was in "the wild" and rampant among systems.

"This is interesting because of the payload, showing Bill Gates on the monopoly board, but it's not in the wild," said Sal Viveros, group marketing manager for Total Virus Defense, for Network Associates (NAI). "A competitor sent out an alert on it even though it wasn't in the wild, and they kind of jumped the gun. We have it at a low risk assessment."

NAI does admit that as more malicious individuals become aware of VBS.Monopoly's existence, that it may find its way to infecting networks.

"We do have it on our watch list of viruses that may become an issue," said Viveros. "As always, we recommend that customers get their anti-virus software updated."

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Matthew Nelson

PC World
Comments are now closed.

Latest News Articles

Most Popular Articles

Follow Us

GGG Evaluation Team

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell

LIFEBOOK UH574

The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi

STYLISTIC Q702

The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott

STYLISTIC Q702

My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Resources

Best Deals on GoodGearGuide

Compare & Save

Deals powered by WhistleOut
WhistleOut

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?