VBS/SANTA - A NEW MASS MAILER DETECTED

                     VBS/Santa aka I-Worm/Santa is a VB Script worm uses Microsoft outlook to spread. It needs windows scripting host to work. The attachment name will be Xmas.VBS. The VBS extension will not appear if windows scripting host is installed.

                     When you open the attachment, it opens the Microsoft Outlook Address book and sends email to 50 address stored in that. The message subject will be "News vom Weihnachtsmann <application user name>", the message body will be

"Guten Tag,
es ist bald Weihnachten.
Und wie sieht's aus mit schönen Geschenken ?
Hierzu ein Tip vom Weihnachtsmann:
Unter www.leos-jeans.de gibt es die besten Geschenke im Web !
Das bedeutet absolut stressfreies Einkaufen, schnelle und unkomplizierte Lieferung, riesige Auswahl.
Also nichts wie hin, und Frohe Weihnachten."

                     It only replicates using outlook and won't damage data in the local machine. Because of the mass mailing routine there is threat to down the e-mail servers.

How can I protect my system?

Fire has incorporated VBS/Santa in virus signature file, with the aim of helping users affected by this script attack to detect and eliminate it from their systems. Fire anti-virus users can update this signature file by using online update facility.

How can I find my system is infected?

                   A free download of FireLite [ 1100KB ] version is available to detect all viruses. If you find any virus, use registered windows version of Fire to remove. To get the registered version of Fire call us at 044-28170440 or mail to service@fireav.com or purchase Fire online using

[Analysis: Mr.Stanley Rakesh, Mr.A.Xavier, Prognet Technologies Pvt. Ltd, Dec. 2000]