<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>World Trade Center--- New Virus Alert!</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<STYLE type=text/css>BLOCKQUOTE {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
DL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
UL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
OL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
LI {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</STYLE>
<META content="MSHTML 5.50.4616.200" name=GENERATOR></HEAD>
<BODY bgColor=#ffffff>
<DIV><EM><FONT face=Garamond color=#800080 size=4>Here we go again -
Toni</FONT></EM></DIV>
<DIV> </DIV>
<DIV style="FONT: 10pt arial">----- Original Message -----
<DIV style="BACKGROUND: #e4e4e4; font-color: black"><B>From:</B> <A
title=answers@htg.net href="mailto:answers@htg.net">Sharon Hart</A> </DIV>
<DIV><B>To:</B> <A title=answers@htg.net
href="mailto:answers@htg.net">answers@htg.net</A> </DIV>
<DIV><B>Sent:</B> Monday, September 24, 2001 3:54 PM</DIV>
<DIV><B>Subject:</B> [HolyGrail] World Trade Center--- New Virus
Alert!</DIV></DIV>
<DIV><BR></DIV>
<DIV><FONT face=Georgia color=#000000 size=+1>Dear Friends,</FONT></DIV>
<DIV><FONT face=Georgia color=#000000 size=+1><BR></FONT></DIV>
<DIV><FONT face=Georgia color=#000000 size=+1>This is just in.....Better safe
than sorry, so am sending it along to you. Seems like there's a new virus every
time we turn around. Today, among the things I will say a prayer of thanksgiving
for is that these viruses don't impact Macs!</FONT></DIV>
<DIV><FONT face=Georgia color=#000000 size=+1><BR></FONT></DIV>
<DIV><FONT face=Georgia color=#000000 size=+1>Blessings,</FONT></DIV>
<DIV><FONT face=Georgia color=#000000 size=+1>+Sharon</FONT></DIV>
<DIV><FONT face=Georgia color=#000000 size=+1>~~~~~~~~~~~~~~~~~~~~~</FONT></DIV>
<DIV><FONT face=Georgia color=#000000 size=+1><BR></FONT></DIV>
<DIV><FONT face=Georgia color=#000000 size=+1><A
href="http://www.computerworld.com/storyba/0,4125,NAV47_STO64195,00.html">http://www.computerworld.com/storyba/0,41<SPAN></SPAN>25,NAV47_STO64195,00.html</A></FONT></DIV>
<DIV><FONT face=Georgia color=#000000 size=+2><B>Warnings issued about new 'WTC'
virus</B></FONT><BR><FONT face=Arial color=#000000 size=+2></FONT></DIV>
<DIV><FONT face=Arial color=#000000 size=+1><BR>By</FONT><FONT face=Arial
color=#003399 size=+1> DAN VERTON</FONT><FONT face=Arial color=#000000
size=+1><BR></FONT><FONT face=Verdana color=#808080 size=+1>(September 24,
2001)</FONT></DIV>
<DIV><FONT face=Verdana color=#000000 size=+1>Security experts today issued a
warning about a dangerous new virus that is spread via e-mail and takes
advantage of people's curiosity and interest in the recent terrorist attack
against the U.S. and the political fallout between Muslims and
non-Muslims.</FONT></DIV>
<DIV><FONT face=Verdana color=#000000 size=+1><BR><BR>Officials at antivirus
vendor Trend Micro Inc. in Cupertino, Calif.,</FONT><FONT face=Verdana
color=#003399 size=+1><U> said</U></FONT><FONT face=Verdana color=#000000
size=+1> companies should be on the lookout for the "WTC.exe" virus, which
arrives via an e-mail attachment and carries malicious code that reformats the
recipient PC's hard drive, deletes files and attempts to eliminate the system's
antivirus protection software.<BR><BR><BR>The virus comes almost two weeks after
the Sept. 11 terrorist attacks against the World Trade Center (WTC) and the
Pentagon and uses social engineering to prey on individuals' natural curiosity
about the attacks. The subject line of the e-mail carrying the virus is known to
read "FW: Peace between America and Islam," according to Susan Orbuch, a
spokeswoman for Trend Micro. Likewise, the body of the message reads, "Hi, Is it
a war against America or Islam. Lets Vote to live in peace."<BR><BR><BR>The
attacks against the Trade Center and Pentagon have been linked to international
terrorist Osama bin Laden, who has declared a jihad, or Islamic holy war,
against the U.S. Since then, Muslim-American religious leaders and other
political leaders, including President Bush, have gone out of their way to
inform people that bin Laden and his extremist terrorist organization don't
represent the beliefs of Islam or of the Muslim world in general.<BR><BR><BR>So
far, Trend Micro has received only spot reports of infections, said
Orbuch.<BR><BR><BR>However, "the timely social engineering of this virus leads
us to believe that it has a high likelihood of spreading," she said.
"Corporations should be using content filters ... to block executables at the
gateway so folks don't even have a chance to open these things."<BR><BR><BR>The
name of the virus is TROJ_VOTE.A. Preliminary analysis by Trend Micro indicates
that it was created using Visual Basic 5 and uses Microsoft Outlook address book
to propagate. In addition to reformatting the user's hard drive, the virus also
deletes certain AV files, installs a file called Zacker.vbs, modifies the
Internet Explorer start-up page and modifies the user's autoexec.bat file to
include a command to reformat drive C.<BR></FONT></DIV>
<DIV><FONT face=Verdana color=#000000 size=+1>Jack Danahy, senior vice president
of server security at WatchGuard Technologies Inc. in Seattle, said the new
virus is similar to the "I Love You" virus because it first sends a copy of
itself to everybody in the recipient's e-mail address book.</FONT></DIV><BR><!-- |**|begin egp html banner|**| -->
<TABLE cellSpacing=0 cellPadding=2 border=0>
<TBODY>
<TR bgColor=#ffffcc>
<TD align=middle><FONT color=#003399 size=-1><B>Yahoo! Groups
Sponsor</B></FONT></TD></TR>
<TR bgColor=#ffffff>
<TD align=middle width=470>
<TABLE cellSpacing=0 cellPadding=0 border=0>
<TBODY>
<TR>
<TD align=middle><FONT face=arial size=-2>ADVERTISEMENT</FONT><BR>
<SCRIPT language=javascript>
finalURL = "http://rd.yahoo.com/M=168643.1620686.3168692.1261774/D=egroupweb/S=1705075979:HM/A=799560/R=0/*http://shop.store.yahoo.com/cgi-bin/clink?overstock3+shopping:dmad/M=168643.1620686.3168692.1261774/D=egroupweb/S=1705075979:HM/A=799560/R=1/1001373300+http://us.rmi.yahoo.com/rmi/http://www.overstock.com/rmi-framed-url/http://www.overstock.com/cgi-bin/d2.cgi%3Fcid=12715";
var flashFileURL = "http://java.yahoo.com/a/1-/flash/misc/osyahoo_new_0919a.swf";
var noFlashImg = "http://java.yahoo.com/a/1-/flash/misc/osyahooalt.gif";
</SCRIPT>
<SCRIPT language=JavaScript
src="http://java.yahoo.com/a/1-/flash/test/0124/lrec_browser_071601.js">
</SCRIPT>
<SCRIPT language=JavaScript>
function makeNewWindow(url) {
var newWindow = window.open(url); }
</SCRIPT>
<NOEMBED><A target=_blank
href="http://rd.yahoo.com/M=168643.1620686.3168692.1261774/D=egroupweb/S=1705075979:HM/A=799560/R=2/*http://shop.store.yahoo.com/cgi-bin/clink?overstock3+shopping:dmad/M=168643.1620686.3168692.1261774/D=egroupweb/S=1705075979:HM/A=799560/R=3/1001373300+http://us.rmi.yahoo.com/rmi/http://www.overstock.com/rmi-framed-url/http://www.overstock.com/cgi-bin/d2.cgi%3Fcid=12715"><IMG
height=250
src="http://java.yahoo.com/a/1-/flash/misc/osyahooalt.gif" width=300
border=0></A> </NOEMBED><NOSCRIPT><A target=_blank
href="http://rd.yahoo.com/M=168643.1620686.3168692.1261774/D=egroupweb/S=1705075979:HM/A=799560/R=4/*http://shop.store.yahoo.com/cgi-bin/clink?overstock3+shopping:dmad/M=168643.1620686.3168692.1261774/D=egroupweb/S=1705075979:HM/A=799560/R=5/1001373300+http://us.rmi.yahoo.com/rmi/http://www.overstock.com/rmi-framed-url/http://www.overstock.com/cgi-bin/d2.cgi%3Fcid=12715"><IMG
height=250
src="http://java.yahoo.com/a/1-/flash/misc/osyahooalt.gif" width=300
border=0></A> </NOSCRIPT></TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD><IMG height=1 alt=""
src="http://us.adserver.yahoo.com/l?M=168643.1620686.3168692.1261774/D=egroupmail/S=1705075979:HM/A=799560/rand=818979177"
width=1></TD></TR></TBODY></TABLE><!-- |**|end egp html banner|**| --><BR><TT>To
unsubscribe from this group, send an email
to:<BR>HolyGrail-unsubscribe@yahoogroups.com<BR><BR></TT><BR><BR><TT>Your use of
Yahoo! Groups is subject to the <A
href="http://docs.yahoo.com/info/terms/">Yahoo! Terms of Service</A>.</TT>
<BR></BODY></HTML>