Greeting card viruses?

UNCjigga

Lifer
Dec 12, 2000
25,383
9,953
136
So I get a 'Thank You' e-greet today from a client of mine. I'm surprised to find it (normally we send thank you notes to customers, not the other way around) but I figured since I just saw him at a conference he's prolly just saying 'wassup'.

I click the link to retrieve my card. A window pops up saying I need to download something (standard certificate, gives me the option to 'always trust' software etc.) Weird...most greeting cards just use Java for that kinda stuff. Okay. Fine, I'll download it. Something smells fishy, but hey that's what Norton Antivirus (with latest definitions) is for...right? So it brings up a standard WISE Installation, and I install the software and the greeting card loads. It looks pretty gh3y and I'm thinking there's no way that this guy would send me this. Two seconds later, I get a message from MS Outlook:

"A program is trying to access e-mail addresses within your Address Book. Do you wish to allow access?" Uhh...no. Message pops up again. Again, I click 'no'. Message keeps poppin' up. All of a sudden I can't click anything without a Windows error 'ding'. Can't switch programs. Can't close IE. Nothing. CTRL-ALT-DEL gets me to the task manager and I see something called 'wowexec.exe' and I nuke it. Its prolly still lurking somewhere. Has anyone seen this? For those amongst you who may be amateur virus sleuths and don't mind getting this on your system, here is a link to the website that the greeting came from.