Sophos

VBS/Monopoly

Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Messages distributed by this worm have the subject line "Bill Gates joke", the message body "Bill Gates is guilty of monopoly. Here is the proof. :-)" and an attached VBS file called MONOPOLY.VBS.

If you launch this attachment, the worm will attempt to send itself to everyone in your Outlook address book. It also writes a JPEG file called MONOPOLY.JPG into your temporary directory, pops up a dialog box proclaiming "Bill Gates is guilty of monopoly. Here is the proof." and then displays the JPEG picture. This shows a Monopoly board with a picture of Bill Gates in the centre. The corner squares of the board are replaced with Microsoft images.

Bill Gates is guilty of monopoly. Here is the proof.

Picture of Bill Gates on Monopoly board

The script also sends system information to the following email addresses:

monopoly@mixmail.com monpooly@telebot.com mooponly@ciudad.com.ar mloponoy@usa.net yloponom@gnwmail.com.

This information includes your computer name, region, language, version, start page for Internet Explorer and the contents of your Outlook address book.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer