Computer Associates warns of Hompage worm

Computer Associates International, Inc. (CA) has warned of the Homepage email worm (also known as VBS/VBSWG.X.Worm, VBSWG.X, and VBS.Homepage), a threat created with the VBS Worm Generation Kit. Although the latest signature updates to CA`s InoculateIT protects users against Homepage, CA`s global antivirus researchers are warning users of this email worm, classified as medium risk, because of its ability to propagate.

The worm arrives in an email with the subject line: "Homepage" and a message body text: "Hi! You`ve got to see this page! It`s really cool ;O)" and the attachment: "HOMEPAGE.HTML.VBS"

Upon execution, the worm sends itself to all email addresses listed in the infected user`s Microsoft Outlook address book. Next, VBS.Homepage searches the user`s Microsoft Outlook Inbox and Deleted Items folders for any messages with the subject "Homepage", and deletes them. Lastly, the worm opens a number of adult-oriented websites with the infected computer system`s default web browser.

"The existence of malicious software generation tools such as the VBS Worm Generation Kit have made it easier for virus writers to create threats," said Ian Hameroff, business manager, security solutions, CA. "But worms like Homepage are quickly thwarted by generic detection capabilities that don`t require specific knowledge of the threat." CA`s award winning InoculateIT antivirus solution already detects VBS.Homepage under the name VBS/Worm.Variant. Additional information is available at http://ca.com/virusinfo.