|
Messages distributed by this
worm have the subject line "Bill Gates joke", the message
body "Bill Gates is guilty of monopoly. Here is the proof.
:-)" and an attached VBS file called MONOPOLY.VBS.
If you launch this attachment,
the worm will attempt to send itself to everyone in your Outlook
address book. It also writes a JPEG file called MONOPOLY.JPG
into your temporary directory, pops up a dialog box proclaiming
"Bill Gates is guilty of monopoly. Here is the proof. :-)"
and then displays the JPEG picture. This shows a Monopoly
board with a picture of Bill Gates in the centre. The corner
squares of the board are replaced with Microsoft images.

The script also sends system
information to the following email addresses:
monopoly@mixmail.com
monpooly@telebot.com
mooponly@ciudad.com.ar
mloponoy@usa.net
yloponom@gnwmail.com
This information includes your
computer name, region, language, version, start page for Internet
Explorer and the contents of your Outlook address book.
|