Computer Associates warns of new "SST" worm

Computer Associates International, Inc. (CA) is advising eBusinesses and home computer users of "SST" (also known as "VBS/SST.Worm," " I-Worm.Lee.o " and "VBS.WG.Fly worm") the latest Microsoft Outlook-based email Worm threat. CA global antivirus researchers have determined this worm to be medium risk.

SST arrives as an email with the subject: "Here you have, :o) "the body of the message reads, "Hi: Check This!" and contains an attachment called "AnnaKournickova.jpg.vbs". The attachment ` s second extension may be hidden, deceiving users into believing they have received a JPEG of the famous Russian star Anna Kournickova.

Upon execution, the worm copies itself to the Windows directory, and then sends the file as an attachment to every address listed in an infected user`s Microsoft Outlook address book. Additionally, SST will attempt to launch a browser directed to a particular website on January 26 of every year.

"E-mail-based threats continue to spread at alarming rates as illustrated by the number of reports CA`s antivirus research centres have received on SST in a short period," said Ian Hameroff, business manager, antivirus solutions, CA. "A comprehensive security policy with the inclusion of gateway-based protection will provide the means to protect organizations from the propagation of these type of threats."

CA`s global threat response team have analyzed SST and released a new signature for the multi-award winning InoculateIT antivirus solution available from http://support.ca.com/Download/virussig.html

Additional information about SST and other virus threats is at http://ca.com/virusinfo/encyclopedia/

InoculateIT is part of CA`s acclaimed eTrust Internet security solutions, which provide a powerful, comprehensive, and integrated approach to building, deploying and securing eBusiness. Built on CA`s Unicenter TNG Framework, eTrust enables eBusiness by safeguarding all mission-critical resources, from the browser to the mainframe.