China DOS Union

At 11 a.m. on April 23, Rising’s global anti-virus monitoring network intercepted a new virus named “SARS” (atypical pneumonia). This virus is highly contagious, and especially during the current SARS outbreak, it may cause a certain amount of panic among users. At the same time, it is putting on a joint performance with the CIH virus that strikes on April 26.

According to analysis by Rising anti-virus engineers, the “SARS” virus is not very destructive. Its main activity is sending out email indiscriminately. It is a “trendy” virus rushed out to take advantage of the SARS period, and the current prevention focus should still be the CIH virus.

When a user opens the email, the “SARS” virus will display a “SARS” window and change the current user’s homepage to www.who.int/csr/don/2003_04_19/en (the World Health Organization’s SARS special page). At the same time, the “SARS” virus will automatically connect to the SMTP server and, on an hourly cycle, pull addresses from the address book and send mail to spread itself.

Rising anti-virus software will be urgently upgraded so that users can detect and remove it in time.

Appendix:

The sender of the virus email may display the following email addresses:
sars@hotmail.com
sars2@hotmail.com
corona@hotmail.com
deaths@china.com
virus@yahoo.com
virus@china.com
virus2@china.com。

Some of the email contents are as follows:
SARS
Severe Acute Respiratory Syndrome
I need your help
Severe Acute Respiratory Syndrome
Virus Alert!

SARS Virus
Corona Virus
honk kong
hongkong.exe
bye
deaths virus

SARS
SEE Ya
SARS Virus
SARS Corona Virus

The attachment files of the virus email are as follows:
deaths.exe
corona.exe
sars2.exe
cv.exe
sars.exe
virus.exe

This post was a good one!!