A new worm in false e-mails provides the latest news on the death of Yasser Arafat to distribute e-mail messages online. The worm is titled "The latest news about Arafat !!", but the trick is to trick users into opening up to infect the system.
According to F-Secure, the virus exploits vulnerabilities in Extended MetaFiles ( MS04-032 ), named W32 / Golten. In the e-mail containing the virus there are two attachments: an image file with the extension "arafat_1.emf" and arafat_2.emf. This is a special .emf file that can install the virus on the system when the user opens the error.
Once inside, it tries to spread through intranet sharing and find passwords that are easy to penetrate into the victim's computer. The purpose of the worm is to create a connection proxy that allows the attacker to connect to many other machines in the local network through the infected computer. This feature can be used to send spam or attack other computers.
F-Secure puts Golten on average. Detailed information about this virus, can refer here
