[Dshield] New worm developed that spreads using Acrobat files

Andy Stevko andy.stevko at usa.net
Tue Aug 21 18:45:52 GMT 2001

Is this real or hype?? 

from http://www.computerworld.com/storyba/0,4125,NAV47_STO62902,00.html

The worm appeared on Tuesday morning and has been analyzed by Bernardo
Quinteros, head of the Madrid-based security firm HispaSec Sistemas and
Richard M. Smith, chief technical officer of the Denver-based Privacy
"Even considering that it is a just-created laboratory virus, this is like a
seed of an upcoming deluge of [viruses] of the same kind in PDF files, a
format considered safe up to now," said Quinteros
In order to spread itself, the virus uses Adobe Acrobat and functions of
Microsoft Corp.'s Outlook that have never been used before. According to both
researchers, the worm uses Outlook to send itself hidden in a PDF file. When
opened using Acrobat, the file will launch a game that prompts the user to
click on the image of a peach. After the user clicks on the image, a Visual
Basic script is run and the virus gets activated, they said. 

More information about the list mailing list