Date: Wed, 07 Mar 2001 01:17:46 -0500 From: Jan Knepper <jan@smartsoft.cc> To: Ad de Bondt <abondt@jameswalker.nl>, Al Balmer <albalmer@worldnet.att.net> Subject: ZDNet: Help & How-To: NakedWife worm deletes Windows files Message-ID: <3AA5D28A.99318324@smartsoft.cc>
next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format. --------------A51CEEEDA3C89085DE2A98A4 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit http://netscape.zdnet.com/zdhelp/stories/main/0,5594,2688521,00.html -- Jan Knepper Smartsoft, LLC 88 Petersburg Road Petersburg, NJ 08270 U.S.A. http://www.smartsoft.cc/ http://www.mp3.com/pianoprincess Phone : 609-628-4260 FAX : 609-628-1267 FAX : 303-845-6415 http://www.fax4free.com/ Phone : 020-873-3837 http://www.xoip.nl/ (Dutch) FAX : 020-873-3837 http://www.xoip.nl/ (Dutch) In God we Trust -- all others must submit an X.509 certificate. -- Charles Forsythe <forsythe@alum.mit.edu> --------------A51CEEEDA3C89085DE2A98A4 Content-Type: text/html; charset=iso-8859-1; name="0,5594,2688521,00.html" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline; filename="0,5594,2688521,00.html" Content-Base: "http://netscape.zdnet.com/zdhelp/stori es/main/0,5594,2688521,00.html" Content-Location: "http://netscape.zdnet.com/zdhelp/stori es/main/0,5594,2688521,00.html" = = = = = = = = = <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>ZDNet: Help & How-To: NakedWife worm deletes Windows files</TITLE>= <META http-equiv=3D"expires" CONTENT=3D"Tue, 20 Aug 1996 01:00:00 GMT"> <META http-equiv=3D"Pragma" CONTENT=3D"no-cache"> <!-- DD2: 03/06/2001 19:34:16 --> <META NAME=3D"TITLE" CONTENT=3D"NakedWife worm deletes Windows files"> <META NAME=3D"DESCRIPTION" CONTENT=3D" March 6, 2001, revised NakedWife = is a new VBS worm that is spreading rapidly via e-mail. NakedWife (alias = JibJab) also deletes important files from your Windows and System folders= =2E Antivirus software vendors are receiving reports from within the Unit= ed States, but it is too early to assess how quickly NakedWife is spreadi= ng. It currently ranks as a 6 on the ZDNet Virus Meter."> <META NAME=3D"KEYWORDS" CONTENT=3D""> <!--Content summary: March 6, 2001, revised NakedWife is a new VBS worm= that is spreading rapidly via e-mail. NakedWife (alias JibJab) also dele= tes important files from your Windows and System folders. Antivirus softw= are vendors are receiving reports from within the United States, but it i= s too early to assess how quickly NakedWife is spreading. It currently ra= nks as a 6 on the ZDNet Virus Meter. Keywords: --><SCRIPT LANGUAGE=3D"Jav= aScript"> <!-- function checkOS() { if(navigator.userAgent.indexOf('Linux') !=3D -1) { var OpSys =3D "Linux"; } else if((navigator.userAgent.indexOf('Win') !=3D -1) && (navigator.userAgent.indexOf('95') !=3D -1)) { var OpSys =3D "Windows95"; } else if(navigator.userAgent.indexOf('Win') !=3D -1) { var OpSys =3D "Windows3.1 or NT"; } else if(navigator.userAgent.indexOf('Mac') !=3D -1) { var OpSys =3D "Macintosh"; } else { var OpSys =3D "other"; } return OpSys; } var OpSys =3D checkOS(); beginRollover =3D false;// This handles a bug in Nav4.0x that executes th= e code too quickly. // convert all characters to lowercase to simplify testing = var agt=3Dnavigator.userAgent.toLowerCase(); = // *** BROWSER VERSION *** = // Note: On IE5, these return 4, so use is_ie5up to detect IE5. = var is_major =3D parseInt(navigator.appVersion); = var is_minor =3D parseFloat(navigator.appVersion); = var is_nav =3D ((agt.indexOf('mozilla')!=3D-1) && (agt.indexOf('spoofer'= )=3D=3D-1) = && (agt.indexOf('compatible') =3D=3D -1) && (agt.indexOf('ope= ra')=3D=3D-1) = && (agt.indexOf('webtv')=3D=3D-1)); = var is_nav2 =3D (is_nav && (is_major =3D=3D 2)); = var is_nav3 =3D (is_nav && (is_major =3D=3D 3)); = var is_nav4 =3D (is_nav && (is_major =3D=3D 4)); = var is_nav4up =3D (is_nav && (is_major >=3D 4)); = var is_navonly =3D (is_nav && ((agt.indexOf(";nav") !=3D -1) || = (agt.indexOf("; nav") !=3D -1)) ); = var is_nav5 =3D (is_nav && (is_major =3D=3D 5)); = var is_nav5up =3D (is_nav && (is_major >=3D 5)); = var is_ie =3D (agt.indexOf("msie") !=3D -1); = var is_ie3 =3D (is_ie && (is_major < 4)); = var is_ie4 =3D (is_ie && (is_major =3D=3D 4) && (agt.indexOf("msie 5.0")= =3D=3D-1) ); = var is_ie4up =3D (is_ie && (is_major >=3D 4)); = var is_ie5 =3D (is_ie && (is_major =3D=3D 4) && (agt.indexOf("msie 5.0")= !=3D-1) ); = var is_ie5up =3D (is_ie && !is_ie3 && !is_ie4); = var isIE4, isIE4PC, isNav4PC, isNav4, isNav3; if (is_ie4 || is_ie4up || is_nav5 || is_nav5up) { isIE4 =3D true; if (OpSys !=3D "Macintosh") { isIE4PC =3D true; } = } else if (is_nav4) { isNav4 =3D true; if (OpSys !=3D "Macintosh") { isNav4PC =3D true; } = } else if (is_nav) { isNav3 =3D true; = } self.name =3D "parentWin"; function openDec(url, name, w, h) { popupWin =3D window.open(url, name, 'resizable=3D1,scrollbars=3D1= ,width=3D' + w + ',height=3D' + h + ''); // focus window (only for Navigator >=3D 3.0) if ( (navigator.appName !=3D "Microsoft Internet Explorer") && (navig= ator.appVersion.substring(0,1) =3D=3D "3") ) popupWin.focus(); } if (OpSys =3D=3D "Linux") { document.write('<LINK REL=3D"STYLESHEET" TYPE=3D"text/css" HREF=3D"http:= //www.zdnet.com/graphics/styles/zd_external.css" TITLE=3D"ZDNet Planet St= yles - Linux">'); } else { document.write('<LINK REL=3D"STYLESHEET" TYPE=3D"text/css" HREF=3D"http:= //www.zdnet.com/graphics/styles/planet.css" TITLE=3D"ZDNet Planet Styles"= >'); if (isNav4PC) { document.write('<LINK REL=3D"STYLESHEET" TYPE=3D"text/css" HREF=3D"http= ://www.zdnet.com/graphics/styles/planet-ns.css" TITLE=3D"ZDNet Planet Sty= les - Netscape">'); } } //--> </SCRIPT></HEAD> <BODY BGCOLOR=3D"#FFFFFF" TEXT=3D"#000000" LINK=3D"#333399" VLINK=3D"#003= 3CC" ALINK=3D"#6666FF" MARGINHEIGHT=3D"0" TOPMARGIN=3D"0" MARGINWIDTH=3D"= 0" LEFTMARGIN=3D"0"> <SCRIPT LANGUAGE=3D"JavaScript1.2"> if (isIE4PC) {document.write('<DIV STYLE=3D"position:relative;top:0;left:= 0;width:610">');} </SCRIPT> = <TABLE BORDER=3D"0" CELLPADDING=3D"0" CELLSPACING=3D"0" WIDTH=3D"610"> <TR> <TD WIDTH=3D"123" VALIGN=3DTOP><A HREF=3D"http://home.net= scape.com"><IMG src=3D"http://www.zdnet.com/feeds/graphics/netscape /nnc_lockup.gif" ALT=3D"NETSCAPE NETCENT ER" WIDTH=3D"123" HEIGHT=3D"25" BORDER=3D0></A></TD> <TD WIDTH=3D"10"><IMG src=3D"http://www.zdnet.com/feeds/g= raphics/netscape/pixel.gif" ALT=3D"" HEIGHT=3D"1" WIDTH=3D"10" BORDER =3D"0"></TD> <TD WIDTH=3D"477" BACKGROUND=3D"http://www.zdnet.com/feed= s/graphics/netscape/navblu.gif" ALIGN=3D"CENTER"><FONT FACE=3D"sans -serif, Arial, Helvetica" SIZE=3D"-1" COLOR=3D"#FFFFFF"> <A HREF=3D"http://home.netscape.com/misc/na= v_redir/netsearch.html" STYLE=3D"color:#FFFFFF;"><B>Search</B></A> - <A= HREF=3D"http://home.netscape.com/misc/nav_redir/webmail.html" STYLE=3D"color:#FFFFFF;"><B>WebMail</B></A> - <= A HREF=3D"http://home.netscape.com/misc/nav_redir/personalize.h tml" STYLE=3D"color:#FFFFFF;"><B>My Netscape</B></A> - &nb= sp;<A HREF=3D"http://home.netscape.com/misc/nav_redir/aim.html" STYLE=3D"color:#FFFFFF;"><B>Buddy Chat</B></A> - &nbs= p;<A HREF=3D"http://home.netscape.com/misc/nav_redir/help.html" STYLE=3D"color:#FFFFFF;"><B>Help</B></A> - <A H= REF=3D"http://home.netscape.com/misc/nav_redir/download.html" STYLE=3D"color:#FFFFFF;"><B>Download</B></A> </FONT></TD> </TR> <!-- SPACING: DO NOT REMOVE /--> <TR><TD COLSPAN=3D"3"><IMG src=3D"http://www.zdnet.com/feeds/gra= phics/netscape/pixel.gif" ALT=3D"" WIDTH=3D"1" HEIGHT=3D"7" BORDER=3D"0 "></TD></TR> </TABLE> <!-- End Netscape Global Header --> <table width=3D"610" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"> <tr><td valign=3D"top" colspan=3D"3" align=3D"center" bgcolor=3D"#003366"= > </td> </tr> <!--**** BEGIN PLANET AND BANNER ****--> <tr><td align=3D"left" valign=3D"bottom" width=3D"135" bgcolor=3D"#ffffff= " background=3D"http://www.zdnet.com/feeds/graphics/netscape/tile.gif "> <a href=3D"http://www.zdnet.com/"><img src=3D"http://www.zdnet.co= m/feeds/graphics/netscape/external_zd_top.gif" width=3D"135" heig ht=3D"75" alt=3D"" border=3D"0"></a><br></td> <td width=3D"62%" align=3D"center" valign=3D"middle" bgcolor=3D"#ffffff" = background=3D"http://www.zdnet.com/feeds/graphics/netscape/tile.gif">; <!-- START BANNER AD --> <!-- Rebecca e38:10764 --> <!--ba--><font size=3D"4"><a href=3D"http://ads3.zdnet.com/c/g=3Dr188&c=3D= a61093&idx=3D2001.03.07.01.13.05/www.verisign.com/cgi-bin/go.cgi?a=3Db007= 415020013000" target=3D"_top"><img src=3D"http://ads3.zdnet.com/i/g=3Dr18= 8&c=3Da61093&idx=3D2001.03.07.01.13.05/http://images.zdnet.com/adverts/im= p/c20100/vs_open_24_guide_468x60.gif" height=3D60 width=3D468 border=3D1 = alt=3D"Click here!"></a></font><!--bcg--><img src=3D"http://gserv.zdnet.c= om/clear/SSEL=3D2688521&SSCH=3D77&SSNS=3D6001787&SSPR=3D&SSTP=3D/ns.gif?a= 61093+983945585+r188+rh=3D" height=3D"1" width=3D"1"><img src=3D"http://b= cs.zdnet.com/prism/7/SSEL=3D2688521&SSCH=3D77&SSNS=3D6001787&SSPR=3D&SSTP= =3D&SSTO=3D5810&SSCN=3D6&SSCAT=3D&SSSRC=3DHELP" height=3D1 width=3D1><!--= ecg--><br><!--ea--> <!-- END BANNER AD --> <!-- BEGIN BANNER AD --> <!-- END BANNER AD --> <img src=3D"http://www.zdnet.com/graphics/clear.gif" width=3D"475" height= =3D"1"><br> </td> </tr> <!--**** END PLANET AND BANNER ****--> <tr><td width=3D"770" colspan=3D"3" bgcolor=3D"#000000"><img src=3D"http:= //www.zdnet.com/graphics/clear.gif" width=3D"1" height=3D"1"></td></tr> </table> <!-- end top content --> <!-- Netscape Breadcrumb --> <TABLE BORDER=3D"0" WIDTH=3D"610"><TR><TD COLSPAN=3D"3"><IMG src=3D"http:= //www.zdnet.com/graphics/clear.gif" ALT=3D"" WIDTH=3D"1" HEIGHT=3D"1" BOR= DER=3D"0"></TD></TR></TABLE> <TABLE BORDER=3D"0" CELLPADDING=3D"0" CELLSPACING=3D"0" WIDTH=3D"610"> <TR><TD COLSPAN=3D"3"><FONT FACE=3D"sans-serif, Arial, Helvetica" SIZE=3D= "2" COLOR=3D"#003366"> <A HREF=3D"http://home.netscape.com/" TARGET=3D"_top"><B>Netscape Home</B= ></FONT></A> > <FONT FACE=3D"sans-serif, Arial, Helveti ca" SIZE=3D"2" COLOR=3D"#003366"><A HREF=3D"http://computing.netscape.com= /computing/main.tmpl" TARGET=3D"_top"><B>Computing & Internet</ B></FONT></A></TD></TR> </TABLE> <TABLE BORDER=3D"0" WIDTH=3D"610"><TR><TD COLSPAN=3D"3"><IMG src=3D"http:= //www.zdnet.com/graphics/clear.gif" ALT=3D"" WIDTH=3D"1" HEIGHT=3D"1" BOR= DER=3D"0"></TD></TR></TABLE> <!-- End Netscape Breadcrumb --> <TABLE BORDER=3D"0" WIDTH=3D"610" CELLPADDING=3D"0" CELLSPACING=3D"0"> <TR><TD ALIGN=3D"LEFT" VALIGN=3D"BOTTOM" BGCOLOR=3D"#999999"> <IMG SRC=3D"http://www.zdnet.com/graphics/clear.gif" WIDTH=3D"1" = HEIGHT=3D"1" ALT=3D""><BR> </TD></TR></TABLE> <SCRIPT LANGUAGE=3D"JavaScript1.2"> if (isIE4PC) {document.write('</DIV>');} </SCRIPT> = <SCRIPT LANGUAGE=3D"JavaScript"> if (isIE4PC) {document.write('<DIV STYLE=3D"position:relative;top:0;left:= 0;width:630">');} if ((isNav3) || (isNav4)) {document.write('<TABLE WIDTH=3D"610" CELLPADDI= NG=3D"0" CELLSPACING=3D"0" BORDER=3D"0"><TR><TD VALIGN=3D"TOP" WIDTH=3D"1= 42">');} </SCRIPT> <TABLE WIDTH=3D"142" CELLPADDING=3D"0" CELLSPACING=3D"0" BORDER=3D"0" ALI= GN=3D"LEFT"> <TR> <TD ALIGN=3D"LEFT" VALIGN=3D"MIDDLE" ROWSPAN=3D"2"> <IMG SRC=3D"http://www.zdnet.com/graphics/clear.gif" WIDTH=3D"4" HEIGHT=3D= "1" ALT=3D""></TD> <TD ALIGN=3D"LEFT" VALIGN=3D"TOP" WIDTH=3D"130"> <SPAN CLASS=3D"spacer8"> </SPAN><BR> </TD> <TD ALIGN=3D"LEFT" VALIGN=3D"MIDDLE"> <IMG SRC=3D"http://www.zdnet.com/graphics/clear.gif" WIDTH=3D"8" HEIGHT=3D= "1" ALT=3D""></TD> </TR> <TR> <TD VALIGN=3D"TOP"> = = <!-- "TABLE OF CONTENTS" COMPONENT --> = <SPAN CLASS=3D"lhead">Contents</SPAN> <TABLE BORDER=3D"0" CELLPADDING=3D"0" CELLSPACING=3D"0" WIDTH=3D"100%"> = = <TR><TD WIDTH=3D"7" VALIGN=3D"top"><IMG WIDTH=3D"7" HEIGHT=3D"12" SRC=3D= "http://www.zdnet.com/zdhelp/images/v_content_bullet.gif" ALT=3D""></TD> <TD><SPAN CLASS=3D"ldeck"> = NakedWife worm deletes Windows files </SPAN></TD></TR> <TR><TD COLSPAN=3D"2"><IMG WIDTH=3D"1" HEIGHT=3D"4" SRC=3D"http://www.zd= net.com/graphics/clear.gif" ALT=3D""></TD></TR> = <TR><TD WIDTH=3D"7" VALIGN=3D"top"><IMG WIDTH=3D"7" HEIGHT=3D"12" SRC=3D= "http://www.zdnet.com/zdhelp/images/v_content_bullet.gif" ALT=3D""></TD> <TD><SPAN CLASS=3D"ldeck"> <a href=3D"http://netscape.zdnet.com:80/zdhelp/stories/main= /0,5594,2688521-2,00.html">Removal and prevention</a> </SPAN></TD></TR> <TR><TD COLSPAN=3D"2"><IMG WIDTH=3D"1" HEIGHT=3D"4" SRC=3D"http://www.zd= net.com/graphics/clear.gif" ALT=3D""></TD></TR> </TABLE> = <!-- "END TABLE OF CONTENTS" COMPONENT --> <p> <IMG SRC=3D"http://www.zdnet.com/graphics/clear.gif" WIDTH=3D"1" HEIGHT=3D= "1" ALT=3D""> <span class=3D"spacer6"> </span><br> <!-- Rebecca e38:9115 --> <!--ba--><TABLE WIDTH=3D"120" HEIGHT=3D"90" CELLSPACING=3D"0" CELLPADDING= =3D"0" BORDER=3D"0"><TR><TD><A HREF=3D"http://ads3.zdnet.com/c/g=3Dr462&c= =3Da60889&idx=3D2001.03.07.01.13.05/achieve.phoenix.edu/banners.asp?revke= y=3D180" target=3D"_top"><IMG SRC=3D"http://ads3.zdnet.com/i/g=3Dr462&c=3D= a60889&idx=3D2001.03.07.01.13.05/http://images.zdnet.com/adverts/imp/c202= 62/secrets_120x90.gif" HEIGHT=3D"90" WIDTH=3D"120" ALT=3D"Click Here!" BO= RDER=3D"0"></A><BR><IMG SRC=3D"http://images.zdnet.com/adverts/imp/templa= tes/macro/macroheader.gif" HEIGHT=3D"13" WIDTH=3D"120" BORDER=3D"0"></TD>= </TR></TABLE><br><!--ea--> <P> <!--TRAPEZO--> = = <SCRIPT LANGUAGE=3D"JavaScript" SRC=3D'http://dc.trapezo.com:80/displaycase?affiliate_id=3D2049&pack_id=3D= 674_1&search=3D5810+virus+NakedWife+worm+deletes+Windows+files'> </SCRIPT> <!--END TRAPEZO--> <P> </TD> <TD ALIGN=3D"LEFT" VALIGN=3D"MIDDLE"> <IMG SRC=3D"http://www.zdnet.com/graphics/clear.gif" WIDTH=3D"8" HEIGHT=3D= "1" ALT=3D""></TD> </TR> </TABLE> <SCRIPT LANGUAGE=3D"JavaScript"> <!-- if ((isNav3) || (isNav4)) {document.write('<BR></TD><TD VALIGN=3D"TOP" WI= DTH=3D"330">');} //--> </SCRIPT> = = <TABLE BORDER=3D"0" CELLSPACING=3D"0" CELLPADDING=3D"0" ALIGN=3D"LEFT" = WIDTH=3D"330"> <TR> <TD ALIGN=3D"LEFT" VALIGN=3D"TOP" WIDTH=3D"322"> = <SPAN CLASS=3D"spacer8"> </SPAN><BR> = <!--content start--> <SPAN CLASS=3D"smhead">NakedWife worm deletes Windows files</SPAN><BR> <SPAN CLASS=3D"smbyline">By Robert Vamosi, <A HREF=3D"http://netscape.zdn= et.com:80/zdhelp/"><I>Help & How-To</I></A></SPAN><BR> <IMG WIDTH=3D"1" HEIGHT=3D"5" SRC=3D"http://www.zdnet.com/graphics/clear.= gif" ALT=3D""><BR> <SPAN CLASS=3D"smdeck">Alias JibJab, this e-mail worm can prevent you fro= m opening applications.</SPAN><BR><P> <font size=3D"2" face=3D"Arial, Geneva, Lucida"> <B>March 6, 2001, <I>revised</I></B><P> <A HREF=3D"" onClick=3D'zdnntlWindow=3Dwindow.open("http://www.zdnet.com= /zdnn/graphics/library/infogfx/vmeter/vmeter1.html","displayWindow","tool= bar=3Dno,location=3Dno,directories=3Dno,status=3Dno,menubar=3Dno,scrollba= rs=3Dno,resizable=3Dno,width=3D626,height=3D260"); return false'><IMG SRC= =3D"http://www.zdnet.com/zdhelp/graphics/virusmeter6.gif" BORDER=3D"0" al= ign=3D"left" VSPACE=3D10 HSPACE=3D10></A>NakedWife is a new VBS worm that= is spreading rapidly via e-mail. NakedWife (alias JibJab) also deletes i= mportant files from your Windows and System folders. Antivirus software v= endors are receiving reports from within the United States, but it is too= early to assess how quickly NakedWife is spreading. It currently ranks a= s a 6 on the ZDNet Virus Meter. <P> <B>How It Works</B><BR> NakedWife arrives as an e-mail with the following:<P> <B>Subject:</B> FW: Naked Wife<P> <B>Body:</b> My wife never look like that :)<BR> Best Regards,<BR> (Sender)<P> <B>Attached:</B> NakedWife.exe <P> If the user clicks the attachment, the worm will e-mail itself to all the= addresses in the Outlook Address Book. It will also load a Flash window = that will display the following message:<P> <P> <center><b>Figure A:</b> NakedWife pretends to load a Flash movie.<P><img= src=3D"http://www.zdnet.com/zdhelp/graphics/worm030601a.gif"><BR><I><SPA= N CLASS=3D"a11">Source: Central Command</span></I> </center> <P> While the above image is on the screen, NakedWife deletes files with the = following extensions:<P> DLL, INI, EXE, BMP, and COM = <P> NakedWife will then display the following message:<P> <span class=3D"a11">You're now F#*#ED! =A9 2001 by BGK (Bill Gates Killer= )</span> <P> </font> <P> <!-- "Sign-up" CUSTOM TAG --> <!-- "Sign-up" CUSTOM TAG END --> <P> <!--content stop--> <TABLE WIDTH=3D"300" BORDER=3D"0" CELLSPACING=3D"0" CELLPADDING=3D"0"> <TR VALIGN=3D"TOP"> <TD WIDTH=3D"9" ALIGN=3D"LEFT" VALIGN=3D"TOP" ROWSPAN=3D"= 2"><SPAN CLASS=3D"dhead"><B> </B></SPAN></TD> <TD WIDTH=3D"141" ALIGN=3D"LEFT"><SPAN CLASS=3D"dhead"> = </SPAN></TD> = <TD WIDTH=3D"141" ALIGN=3D"RIGHT"><SPAN CLASS=3D"dhead"> = <A HREF=3D"http://netscape.zdnet.com:80/zdhelp/stories/main/0,5594,268= 8521-2,00.html">Next</A> </SPAN></TD> <TD WIDTH=3D"9" ALIGN=3D"RIGHT" VALIGN=3D"TOP" ROWSPAN=3D= "2"><SPAN CLASS=3D"dhead"><B> = > </B></SPAN></TD> </TR> <TR VALIGN=3D"TOP"> <TD ALIGN=3D"LEFT"><SPAN CLASS=3D"ddeck"> </SPAN></TD> <TD ALIGN=3D"RIGHT"><SPAN CLASS=3D"ddeck">Removal and p= revention</SPAN></TD> </TR> </TABLE> <!-- THIS IS THE END OF THE MAIN CONTENT--> <BR><IMG SRC=3D"http://www.z= dnet.com/graphics/clear.gif" WIDTH=3D"322" HEIGHT=3D"1" ALT=3D""><BR> </TD> <TD ALIGN=3D"LEFT" WIDTH=3D"8" VALIGN=3D"TOP"><IMG SRC=3D"http://www.zdn= et.com/graphics/clear.gif" WIDTH=3D"8" HEIGHT=3D"8" ALT=3D""></TD> = = = </TR> </TABLE> <SCRIPT LANGUAGE=3D"JavaScript"> <!-- if ((isNav3) || (isNav4)) {document.write('<BR></TD><TD VALIGN=3D"TOP"= WIDTH=3D"138">');} //--> </SCRIPT> = <TABLE BORDER=3D"0" CELLSPACING=3D"0" CELLPADDING=3D"0" WIDTH=3D"138" = ALIGN=3D"LEFT"> <TR> <TD ALIGN=3D"LEFT" WIDTH=3D"138" VALIGN=3D"TOP"> = <SPAN CLASS=3D"spacer8"> </SPAN><BR> = = <TABLE WIDTH=3D"138" CELLSPACING=3D"0" CELLPADDING=3D"0" BORDER=3D"0"> <TR> <TD WIDTH=3D"129" ALIGN=3D"right"><SPAN CLASS=3D"dhead"> = <A HREF=3D"http://netscape.zdnet.com:80/zdhelp/stories/main/0,5594,268= 8521-2,00.html">Next</A> </SPAN></TD> <TD WIDTH=3D"9" ALIGN=3D"right"><SPAN CLASS=3D"dhead"><B> = > </B></SPAN></TD> </TR> <TR> <TD WIDTH=3D"129" ALIGN=3D"right"><SPAN CLASS=3D"ddeck">Removal and preve= ntion</SPAN></TD> <TD WIDTH=3D"9" ALIGN=3D"right"><SPAN CLASS=3D"dhead"> </SPAN></TD> </TR> </TABLE> <P> <!-- "RELATED LINKS" COMPONENT (24) - {editable by page} --> = = = = = <SPAN CLASS=3D"lhead">Best Resources</SPAN> <TABLE BORDER=3D"0" CELLPADDING=3D"0" CELLSPACING=3D"0"><TR><TD><SPAN C= LASS=3D'ldeck'><A HREF=3D'http://netscape.zdnet.com:80/zdhelp/stories/mai= n/0,5594,2568111,00.html'><B>How-To:</B> How to turn off Windows Scriptin= g Host</A></SPAN></TD></TR><TR><TD COLSPAN=3D"2"><SPAN CLASS=3D"spacer4">= </SPAN></TD></TR><TR><TD><SPAN CLASS=3D'ldeck'><A HREF=3D'http://ne= tscape.zdnet.com:80/zdhelp/filters/quickstart/guides/0,10606,6013362,00.h= tml'><B>Help:</B> Virus Protection Guide</A></SPAN></TD></TR><TR><TD COLS= PAN=3D"2"><SPAN CLASS=3D"spacer4"> </SPAN></TD></TR><TR><TD><SPAN CL= ASS=3D'ldeck'><A HREF=3D'http://netscape.zdnet.com:80/downloads/topics/an= tivirus.html'><B>Downloads:</B> Free anti-virus software</A></SPAN></TD><= /TR><TR><TD COLSPAN=3D"2"><SPAN CLASS=3D"spacer4"> </SPAN></TD></TR>= <TR><TD><SPAN CLASS=3D'ldeck'><A HREF=3D'http://forums.zdnet.com/group/zd= =2ESecurity.Virus.Alerts/helpnhowto/oview.tpt/@thread@first@F@75@D-,D@all= ?ROS=3D1'><B>Forum</B>: Ask your NakedWife questions here</A></SPAN></TD>= </TR><TR><TD COLSPAN=3D"2"><SPAN CLASS=3D"spacer4"> </SPAN></TD></TR= ></TABLE> <!-- "RELATED LINKS" COMPONENT END --> <SPAN CLASS=3D"spacer8"> </SPAN><BR> <TABLE WIDTH=3D"138" CELLSPACING=3D"0" CELLPADDING=3D"0" BORDER=3D"0"> <TR> <TD VALIGN=3D"TOP"> <!--Begin Superbox--> <!--Begin ComputerShopper Component--> <!--ERROR: no category entered for topic id, its parent and ancestors--><= !--End ComputerShopper Component--> <SPAN CLASS=3D"spacer8"> </SPAN><BR> <!--Begin Edit Promo--> <TABLE WIDTH=3D"138" BORDER=3D"0" CELLPADDING=3D"2" CELLSPACING=3D"0"> <TR><TD COLSPAN=3D"2"><SPAN CLASS=3D"rhead"> </SPAN></TD></TR> = <TR><TD ALIGN=3D"LEFT"><SPAN CLASS=3D"rdeck"> </SPAN></TD></TR></TABLE> <!--End Edit Promo--> <SPAN CLASS=3D"spacer8"> </SPAN><BR> <!--Begin Email/Print--> <SCRIPT LANGUAGE=3D"Javascript"> var isNav4, isIE4, isNav3, isIE3 if (navigator.appVersion.charAt(0) =3D=3D "4") { if (navigator.appName =3D=3D "Netscape") { isNav4 =3D true; } else { isIE4 =3D true; } } else if (navigator.appVersion.charAt(0) =3D=3D "3") { if (navigator.appName =3D=3D "Netscape") { isNav3 =3D true; } else { isIE3 =3D true; } } <!-- // window opening function, automatic close of open window // added by timon, 9/9/1998 // modifications for MSIE, 9/17/1998, timon var popupWin =3D null; = function openWindow(url, name, rs, sc, w, h) { var resize =3D ""; var scroll =3D ""; if (isNav3 || isNav4 || isIE4) { if (rs) resize =3D "resizable,"; if (sc) scroll =3D "scrollbars,"; if (popupWin !=3D null && !popupWin.closed) { oldWin =3D popupWin; oldWin.name =3D "oldWin"; oldWin.close(); } popupWin =3D window.open(url, name, resize + scroll + 'width=3D= ' + w + ',height=3D' + h); if (popupWin.opener =3D=3D null) popupWin.opener =3D popupWin; popupWin.opener.name =3D "origWin"; popupWin.focus(); return false; // for links } else { return true; } } var referPath referPath =3D window.location //--> </SCRIPT> <!--below is the new Zaplet (Firedrop) version of the email-this link--> <a href=3D'http://zaplet.zdnet.com/authorpages/zdnet/sendAndDiscuss.jsp?t= itle=3DNakedWife+worm+deletes+basic+Windows+files&url=3Dhttp%3A%2F%2Fwww%= 2Ezdnet%2Ecom%2Ffilters%2Ffiredrop%2F0%2C%2C2688521%2C00%2Ehtml&fail=3Dht= tp://www.zdnet.com%2Ffilters%2Femail%5Fentry%2F0%2C8965%2C2688521%2D77%2C= 00%2Ehtml' onClick=3D"openWindow('http://zaplet.zdnet.com/authorpages/zdn= et/sendAndDiscuss.jsp?title=3DNakedWife+worm+deletes+basic+Windows+files&= url=3Dhttp%3A%2F%2Fwww%2Ezdnet%2Ecom%2Ffilters%2Ffiredrop%2F0%2C%2C268852= 1%2C00%2Ehtml&fail=3Dhttp://www.zdnet.com%2Ffilters%2Femail%5Fentry%2F0%2= C8965%2C2688521%2D77%2C00%2Ehtml','EmailThis',1,1,510,620); return false;= "><img src=3D'http://www.zdnet.com/include/ads/campaigns/sponsorbox/email= 2.gif' width=3D110 height=3D40 border=3D0 alt=3D'E-mail this story!'></a>= <BR> <!--end Zaplet link--> <a href=3D"http://netscape.zdnet.com:80/filters/printerfriendly/0,6061,26= 88521-77,00.html"><IMG SRC=3D'http://www.zdnet.com/include/ads/campaigns/= sponsorbox/print2.gif' WIDTH=3D110 HEIGHT=3D40 BORDER=3D0 ALT=3D'Printer = Friendly'></a><BR><SCRIPT LANGUAGE=3D'Javascript'> = document.write('<a href=3D"http://my.zdnet.com/myzdnet/addclip/1,,,00.ht= ml?link=3D' + referPath + '&link_title=3DNakedWife+worm+deletes+basic+Win= dows+files&back=3Dlink" onClick=3D"openWindow(\'http://my.zdnet.com/myzdn= et/addclip/1,,,00.html?link=3D' + referPath + '&link_title=3DNakedWife+wo= rm+deletes+basic+Windows+files&back=3Dlink&popup=3Don\',\'AddClip\',1,1,2= 75,300); return false;"><img src=3D"http://www.zdnet.com/include/ads/camp= aigns/sponsorbox/save_this.gif" width=3D110 height=3D40 border=3D0 alt=3D= "Save this!"></a><br>'); </SCRIPT><!--End Email/Print--> <!--End Superbox--> </TD> </TR> </TABLE> <BR> </TD> </TR> </TABLE> <SCRIPT LANGUAGE=3D"JavaScript"> if ((isNav3) || (isNav4)) {document.write('</TD></TR></TABLE>');} if (isIE4PC) {document.write('</DIV>');} </SCRIPT> <BR CLEAR=3D"ALL"> <BR CLEAR=3D"ALL"> <SCRIPT LANGUAGE=3D"JavaScript1.2"> if (isIE4PC) {document.write('<DIV STYLE=3D"position:relative;top:0;left:= 0;width:610;vertical-align:top">');} </SCRIPT> <TABLE WIDTH=3D"610" BORDER=3D"0" CELLPADDING=3D"0" CELLSPACING=3D"0"> <TR> = <TD WIDTH=3D"4" ROWSPAN=3D"2" BGCOLOR=3D"#FFFFFF"><IMG SRC=3D"http://ww= w.zdnet.com/graphics/clear.gif" WIDTH=3D"4" HEIGHT=3D"1" ALT=3D""></TD> <TD VALIGN=3D"TOP" WIDTH=3D"606" BGCOLOR=3D"#FFFFFF"> = </TD> </TR> <TR> <TD VALIGN=3D"TOP" BGCOLOR=3D"#FFFFFF"> = = <table cellpadding=3D"0" cellspacing=3D"0" width=3D"610" border=3D"0" bgc= olor=3D"#FFBA00"> <tr> <td> <table width=3D"610" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" bgc= olor=3D"#000000"> <tr><td width=3D"125" valign=3D"top" bgcolor=3D"#333399"><a href=3D"http:= //www.zdnet.com"><img src=3D"http://www.zdnet.com/feeds/graphics/nets cape/external_zd_bot1.gif" width=3D"125" height=3D"42" border=3D"0" alt=3D= "ZDNet"></a></td><td align=3D"center" valign=3D"middle" bgcolor=3D"#3333 99"> <nobr><a class=3D"bnav" href=3D"http://www.zdnet.com/filters/email/">News= letters</a><span class=3D"bnavsep"> | </span></nobr> <nobr><a class=3D"bnav" href=3D"http://updates.zdnet.com/">Updates</a><sp= an class=3D"bnavsep"> | </span></nobr> <nobr><a class=3D"bnav" href=3D"http://cma.zdnet.com/texis/zdrewards/">Re= wards</a><span class=3D"bnavsep"> | </span></nobr> <nobr><a class=3D"bnav" href=3D"http://members.zdnet.com/register/registe= r.cgi">Join ZDNet</a><span class=3D"bnavsep"> | </span></nob r> <br></td></tr><tr><td width=3D"125" valign=3D"top" bgcolor=3D"#000066"><a= href=3D"http://www.zdnet.com"><img src=3D"http://www.zdnet.com/feeds /graphics/netscape/external_zd_bot2.gif" width=3D"125" height=3D"26" bord= er=3D"0" alt=3D"ZDNet"></a></td><td align=3D"center" valign=3D"middle" bgcolor=3D"#000066"> <nobr><a class=3D"bnav" href=3D"http://www.zdnet.com/filters/feedback">Fe= edback</a><span class=3D"bnavsep"> | </span></nobr> <nobr><a class=3D"bnav" href=3D"http://www.zdnet.com/filters/privacy/">Yo= ur Privacy</a><span class=3D"bnavsep"> | </span></nobr> <nobr><a class=3D"bnav" href=3D"http://www.zdnet.com/filters/terms">Servi= ce Terms</a><span class=3D"bnavsep"> | </span></nobr> <nobr><a class=3D"bnav" href=3D"http://www.zdnet.com/adverts/adinfo/">Adv= ertise</a><span class=3D"bnavsep"> | </span></nobr> <nobr><a class=3D"bnav" href=3D"http://www.zdnet.com/coinfo/filters/welco= me">About Us</a></nobr></td></tr></table> </td></tr></table> <!-- Start Netscape Global Footer --> <TABLE BORDER=3D"0" CELLPADDING=3D"0" CELLSPACING=3D"0" WIDTH=3D"610"> <TR> <TD BGCOLOR=3D"#CCCCCC" WIDTH=3D"1"><IMG SRC=3D"http://ww= w.zdnet.com/feeds/graphics/netscape/pixel.gif" ALT=3D"spacer" WIDTH =3D"1" HEIGHT=3D"20" BORDER=3D"0"></TD> <TD BGCOLOR=3D"#EEEEEE" WIDTH=3D"608"> <TABLE BORDER=3D"0" CELLPADDING=3D"4" CELLSPACING= =3D"0" WIDTH=3D"592"> <TR> <TD><FONT FACE=3D"arial,sans-seri= f,helvetica" SIZE=3D"-1"> <a href=3D"http://home.netscape.com/mi sc/nav_redir/help.html">Help</a> - <a href=3D"http://home.netscape.com/misc/nav_redir/site_map.html"= >Site Help Map</a> - <a href=3D"http://home.netscape.com/misc= /nav_redir/ad.html">Advertise with Us</a> - <a href=3D"http://home.netscape.com/netce= nter/new.html">What's New</a> - <a href=3D"http://home.netscape.com/netcenter= /cool.html">What's Cool</a></FONT></TD> </TR> </TABLE> </TD> <TD BGCOLOR=3D"#CCCCCC" WIDTH=3D"1"><IMG SRC=3D"http://ww= w.zdnet.com/feeds/graphics/netscape/pixel.gif" ALT=3D"spacer" WIDTH =3D"1" HEIGHT=3D"20" BORDER=3D"0"></TD> </TR> <TR><TD BGCOLOR=3D"#CCCCCC" COLSPAN=3D"3"><IMG SRC=3D"http://www.= zdnet.com/feeds/graphics/netscape/pixel.gif" ALT=3D"spacer" WIDTH=3D" 1" HEIGHT=3D"1" BORDER=3D"0"></TD></TR> </TABLE> <!-- End Netscape Global Footer --> <TABLE BORDER=3D"0" WIDTH=3D"100%" CELLPADDING=3D"0" CELLSPACING=3D"0"= > = = = <TR><TD COLSPAN=3D"2"> = <SPAN CLASS=3D"v10"> <a href=3D'http://netscape.zdnet.com:80/special/graphics/copyright.html= '>Copyright</a> © 2001 ZD Inc. ZDNet is a registered service mark o= f ZD Inc. ZDNet Logo is a service mark of ZD Inc. = </SPAN> </TD></TR> = </TABLE> </TD> </TR> </TABLE> <SCRIPT LANGUAGE=3D"JavaScript1.2"> if (isIE4PC) {document.write('</DIV>');} </SCRIPT> </BODY> </HTML> --------------A51CEEEDA3C89085DE2A98A4-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3AA5D28A.99318324>