VBS/Monopoly

Category: Viruses and Spyware Protection available since:09 Aug 1999 00:00:00 (GMT)
Type: Visual Basic Script worm Last Updated:19 Dec 2007 05:39:05 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Messages distributed by this worm have the subject line "Bill Gates joke", the message body "Bill Gates is guilty of monopoly. Here is the proof. :-)" and an attached VBS file called MONOPOLY.VBS.

If you launch this attachment, the worm will attempt to send itself to everyone in your Outlook address book. It also writes a JPEG file called MONOPOLY.JPG into your temporary directory, pops up a dialog box proclaiming "Bill Gates is guilty of monopoly. Here is the proof." and then displays the JPEG picture. This shows a Monopoly board with a picture of Bill Gates in the centre. The corner squares of the board are replaced with Microsoft images.

Bill Gates is guilty of monopoly. Here is the proof.

Picture of Bill Gates on Monopoly board

The script also sends system information to the following email addresses:

monopoly@mixmail.com monpooly@telebot.com mooponly@ciudad.com.ar mloponoy@usa.net yloponom@gnwmail.com.

This information includes your computer name, region, language, version, start page for Internet Explorer and the contents of your Outlook address book.

download Try Sophos products for free
Download now