Virus Alert - W32.Naked@MM (a.k.a. NakedWife) Last Updated 03/13/2001

W32.Naked@MM has been found in the wild. The virus was written in Visual Basic and requires the Visual Basic runtime files (verions 6 or higher). The virus arrives as a Flash movie that, when executed, sends itself to all recipients in the Outlook Address Book. It then attempts to deletes all files in the WINDOWS and WINDOWS\SYSTEM directories with the extensions:
.BMP, COM, DLL, EXE, INI, and LOG.
It copies itself to the default TEMP directory when executed, and then displays a Window titled "Flash" that displays the text "JibJab Loading". It proceeds by sending a separate email message, using Microsoft Outlook, to each recipient in the Outlook Address Book. The messages appear as follows:

Subject: Fw: Naked Wife
and the body includes the text:
My wife never look like that! ;-)

Best Regards,
and includes the sender's name.

The attachment is titled:
NakedWife.exe

Do not execute the attachment!

For more information see:

• From McAfee: http://vil.nai.com/vil/content/v_99035.htm
• From Trend Micro: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_NAKED.A (Renamed as WORM_NAKED.A).

This archive is not intended to be comprehensive. For a more complete virus library, please visit NAI's Virus Information Library at http://vil.nai.com.