A computer virus that masks itself as a text file has hit several corporate networks, prompting security experts to issue warnings as well as potential fixes for the worm.
The so-called stages.worm virus comes in email attachments from messages containing one of 12 randomly generated subject lines, including "Funny" and "Jokes." Like the "I Love You" and Melissa viruses, stages.worm replicates itself through Microsoft's Outlook Express email program. It also targets
IRC (Internet Relay Chat) and America Online's ICQ instant messaging service.
The attachment shows up as LIFE_STAGES.TXT.
According to reports, the virus had caused email systems shutdowns at four Fortune 100 companies yesterday. Antivirus software company Network Associates raised its warning on the "stages" worm from "low" to "high" based on the number of infections reported, according to the company?s Web site.
Vincent Gullotto, director of Network Associates' Anti-Virus Response Team (AVERT), said yesterday that about 50 customers reported seeing the virus.
"We found the virus two weeks ago and assessed its risk as low," Gullotto said. "But over the weekend we had a couple of large global corporations report the virus, and then...numbers started to mount."
The virus does not destroy files or otherwise damage computer systems, he added.
A notice posted on Symantec's Web site said that the virus could potentially overwhelm email servers.
A project manager at Symantec's antivirus research center said yesterday that his company had received close to 100 reports of infection since the worm first surfaced, but that this was "peanuts" compared to its fast-spreading predecessors such as Melissa or I Love You.
Like earlier examples of malicious programming, the worm has managed to take down a few corporate mail servers. If the virus is activated, it sends a copy of itself to every address found in an infected computer's address book.
The LIFE_STAGES.TXT attachment is a Shell Script object file, according to a
report on the virus posted at Network Associates' Web site. Shell Script files carry the extension "SHS," but the extension is not normally displayed, making it easy to disguise.
Gullotto said computer users should not assume they can tell whether an attached file is safe simply by looking at the file type. He pointed to two other recent examples of disguised malicious files, Downloader and Backdoor G2, which erroneously appeared to be video files with "AVI" extensions.
The attachment includes a series of jokes about how dating changes as people get older.
The "life stages" worm masks itself as a text file, ordinarily among the most innocuous of email attachments.
Experts warned that computer users should be cautious even of these in the future, unless the content of the attachment is known in advance.
The Associated Press contributed to this report.
Join the conversation
Comment replyThe posting of advertisements, profanity, or personal attacks is prohibited. Click here to review our Terms of Use.
MIT creates a simulation to celebrate the 50th anniversary of Spacewar. A relic of the early days of minicomputers, it was one of the first computer video games and set the stage for many others, including Asteroids.
AstrologyDating.com is a new site that tries to find you your perfect love on the basis of birth date, birth time, and birthplace. But will it tell you the truth? Well, it asks you to pay only per match. So I tried it.
The Web fulminates when it is revealed that executives from VEVO--vehement music industry antipirates--played a pirated stream of an NFL playoff game at a party. VEVO claims it left its Wi-Fi unsupervised. Have we heard that argument before?
Tor's "obfsproxy" technology would make encrypted data look innocuous and let it dodge government censors. That could help citizens in Iran reach blocked sites as antigovernment protests reportedly loom.
iPhones and Angry Birds aside, the arcade endures. Crave pays a visit--and offers up an homage to games and gamers of years past and a tribute to the possibly endangered, but not yet dead, atmosphere of the arcade itself.
Join the conversation