New Virus named Wallon

This was in a message I got. I thought it was interesting. Anyone know anything about it?

Dean

"So you’re a smart guy and virus aware. You have virus software
installed and updated.
You have a firewall. You dont click on strange email attachments. You
get microsoft updates. You are now safe. I thought I was but
YOU ARE NOT SAFE
There is a new Wallon Virus that does NOT come from attachments or open
ports. It uses links in an email to link itself
to a site that downloads the virus on your computer. I have heard this
was possible buy never ran across it so wasn’t that careful with links
other than the ones that were obvious trouble.
This one goes a step beyond and uses a innocent looking link but the
link properties go somewhere else.

It downloads a dormant virus to your computer. My virus softwear DID
NOT detect it. This one activates when you try to use Windows Media
Player then ruins it.

The link below is NOT a virus but demonstrates how it works.
The link is typed in as cnn but the properties link to disney.
http:/www.cnn.com/

The latest microsoft update has disabled the add link feature in
Outlook Express so you can only type in an actual url. I was able to do this
with the online yahoo composer since I left off one of the slashes to
get by their limited blocking. I’m sure others will still be able to do
it.

Don’t be so sure you won’t be fooled. I still don’t remember clicking
on any funny links and only noticed it when it activated.

You can check the link for hidden properties. If you have your status
bar on the actual link will display there. You can also copy and paste
the link in your browser which will go to the typed in address instead
of the hidden address.

I was able to remove the virus but my system restore “encountered a
problem and has to close” every time I try to start it even in safe mode
and command prompt startup. If there are any computer gurus that no how
to fix it without reformating
let me know soon."

Hi DHM100 !
Let me explain to you:
I’m not able to help you concerning your viruse problem cause I’m just a novice…
But I love the way you ask for help, and I know you’ll find it on this forum: Technical maxim is “we’re a band of brothers”. :smiley: :smiley: :smiley: :smiley: :smiley:

DHM100
You said this was in a message you received but, you didn’t say if you new the sender. Did you? or, did you just open it blindly?

W32.Wallon.A@mm is a Level 2 mass-mailing worm that sends out e-mails containing a hyperlink to download the worm body from certain URL. It also harvests e-mail addresses on the infected machine.