VirusList.com Virus Alerts & Virus News. Monday, October 21, 2002 ****************************************************************** 1. New Virus "In The Wild" - Trojan.VBS.Carewmr 2. How to subscribe/unsubscribe **** 1. New Virus "In The Wild" - Trojan.VBS.Carewmr Carewmr is a dangerous trojan program written in the VBS language. It deletes the contents of the "C:\Windows" directory. When the trojan program is executed, it shows the following messages: "Welcome to CLRAV of Kaspersky Labs, press OK or Accept to Start scanning your computer." "ERROR!, Code error:3212552, please execute this tool in MS-DOS." "Thank You for prefer Kaspersky Labs Products" "Carewmr" then opens the "http:\\www.avp.ru" site in the default Internet browser. On September 1st the trojan program displays the message: "Mr.Carew vuelve otra vez!!, jaja" To get a more detailed account of this virus, please visit The Kaspersky Virus Encyclopedia at: http://www.viruslist.com/eng/viruslist.html?id=57487

Symantecs write-up; http://www.symantec.com/avcenter/venc/data/vbs.avfake.html