Selected viruses, spyware, and other threats: sorted alphabetically

VBS/Jean.A is a script worm of, probably, German origin.  Its origin is suggested by the message text as well as by the author’s note in the worm code.  It arrives as an email message with the subject "News vom Weihnachtsmann" and the following message text:

Guten Tag,

es ist bald Weihnachten.
Und wie sieht's aus mit schönen Geschenken ?
Hierzu ein Tip vom Weihnachtsmann:
Unter www.leos-jeans.de gibt es die besten Geschenke im Web !
Das bedeutet absolut stressfreies Einkaufen, schnelle und unkomplizierte Lieferung, riesige Auswahl.

Also nichts wie hin, und Frohe Weihnachten.

In the attachment there is a file containing the worm code.  The filename of the attachment is in most cases xmas.vbs but it may be also a different name.  When the file in the attachment is executed the worm sends its copy to the first 50 addresses from the Outlook address book.  The worm ignores empty items in the address book.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this encyclopedia may be reproduced, transmitted or used in any other way in any other form or by any means without prior permission from Eset.