KILLER 'Clinton' screensaver, W32/Caric-A worm, VERY destructive!

Automated PC Solutions
VACM - Virus Alerts for the Common Man

get it now: #1 AntiSpyware #1 AntiVirus #1 Personal Firewall

VACM Home VACM Links APCS Home

bookmark this page:

KILLER 'Clinton' screensaver, W32/Caric-A worm, VERY destructive!

Your old boxes are worth CASH $$... Click to learn more...

Electronics
Bargains

VACM Home

VACM How-To Movie: Learn how to Remove Spyware from your PC for free (really!). Click to Watch the video.

Greetings from The VACM Team,

In this issue:
------------------------------------
- KILLER 'Clinton' screensaver, W32/Caric-A worm, VERY destructive!

***************************************************
* The Bottom Line...
***************************************************
A VERY dangerous screen saver claiming to be a hilarious
Bill Clinton screen saver is attached to the email that
looks like this:

*--------------------------------------------------
*| Subject: my life ohhhhhhhhhhhhh
*| Body:
*| Hiiiii
*| How are youuuuuuuu?
*| look to the bill caricature vvvery verrrry ffffunny :-) :-)
*| i promise you will love it? ok
*| buy
*|
*|
*| ========No Viruse Found========
*| MCAFEE.COM
*--------------------------------------------------
*| Attachment: CARI.SCR
*--------------------------------------------------

If you double-click on the attached "CARI.SCR" file, a small
cartoon appears, featuring Bill Clinton playing a saxophone
that has a bra hanging out of the end of the horn.

The worm copies itself to the Windows system folder, makes changes
to your system registry keys to ensure that it runs itself at
8 a.m. every day.

It also tries to delete all files on drives C:, D:, E: and F:.

It especially tries to target Windows system files including files
ending in SYS, VXD, OCX and NLS extensions. Ultimately, the damage
that results would usually require a complete rebuild of your system!

As with most viruses and worms, this one spreads itself by sending
itself to everyone in your address books.

***************************************************
* What You Should Do...
***************************************************
1. DO NOT double-click the attachment

2. Delete the email

3. If you have not already done so, disable hiding of file extensions
so that you would be able to see that this file attachment ends
in ".SCR" which would further alert you to the fact that this file
should not be executed. The "HowTo" article for disabling the
hiding of file extensions is at the VACM Archives home page at:

"HowTo: Disable Hiding Of File Extensions"

4. Familiarize yourself with how to deal safely with all file
attachments by reading our "Fear No Attachments" article at:

VACM Article- Fear No Attachments

***************************************************
* If You Get Infected...
***************************************************
If you run this screen saver, you will most likely need to have your
system rebuilt from scratch. Unless you are very technically
capable of performing this task, you will need to seek professional
assistance to wipe your entire hard drive(s) and reinstall Windows
and all your software.

Best Regards,
Marc Deschenes, VACM Editor
The VACM Project at
Automated PC Solutions

*** Be sure to check out the appendix at the end of this alert
if you are having trouble booting your computer into "Safe Mode".
The process is all spelled out for you there.

Why should you be very
concerned about Spyware?

Learn how to avoid Identity Theft and Windows corruption in this
free VACM Video:
VACM-tested #1 AntiSpyware Software

How did they steal my Identity?

Why do I get so much SPAM ?

Why is your computer
running so slow ?

Today, every PC needs just a few protection softwares. Find out what and why. Visit our Links Page to avoid Indentiry Theft and costly computer repairs.
VACM Links to Protection Tools and Softwares

Keep your PC Safe and
Avoid a costly trip to the shop...
with these VACM approved tools.

You need 3 things to protect your PC(s) automatically. Use these links to go directly to the Download and Purchase pages:

Old Shotgun Shell Boxes
are collector's items and
worth good money!
(yes... just the empty boxes)

get your
ShotShell BlueBook
price guide
now.

To cancel your subscription to VACM, reply to this email with the word UNSUBSCRIBE in the subject.

If you click on the link below, the "unsubscribe" email will be created for you and you can simply hit "Send" in you email program:

Create My Unsubscribe Email

IMPORTANT: please include the email address at which you are currently receiving VACM Alerts in the body of the message.

******** APPENDIX - Handy How-To Tips **********

* How To Boot into Safe Mode

Shut the computer down so that the power is off.

Turn the computer on, wait 1 second and begin pressing the F8 key
on the keyboard, once every second repeatedly. Do this until
the Windows Startup Menu appears. If you get a keyboard
error, press F1 to resume and then continue pressing the
F8 key once every second, or your PC may tell you to press another key for BIOS setup.

Select Safe Mode from the Windows Startup Menu, then press
the Enter key on the keyboard.

Windows will then boot into Safe Mode.
NOTE: This may take longer than a normal boot.

At the end of the boot process a dialog box will appear
informing you that Windows is in Safe Mode. Click OK on this dialog box.

Windows is now in Safe Mode.

If you miss hitting the F8 at the right time, Windows will boot
normally and you will not see the "Safe Mode" message. In this
case, start from the top of these instructions until you get the
boot menu screen where you can choose "Safe Mode". This can be
a little tricky the first time you do it.