Virus Advisory - VBS/Numgame@MM Last Updated 02/15/02

On 2/14/02, NAI reported a new virus VBS/Numgame@MM, but does not report it to be found in the wild. TrendMicro reports that it has been seen in the wild, and rates it a medium risk. NAI will detect the virus as New Script if heuristic scanning is enabled.
The virus arrives as an email attachment to a message with:

Subject: Are you (recipients name) my valentine?
Hi (recipients name) my valentine, remember me? I ain't seen you in ages! Anyway, check-out and play the attached guess-the-number-game to guess who I am. See you soon, bye-bye!
Attachment: GuessGame.html (21,194 bytes)

When the attachment is executed the virus prompts to install ActiveX controls, and then installs itself. It sends itself to all email addresses in Outlook address book(s).

For more information see:

• From NAI: http://vil.nai.com/vil/content/v_99359.htm
• From TrendMicro:http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=VBS_NUMGAME.A