A new Internet virus being circulated exploits fears about the severe acute respiratory syndrome (SARS) epidemic, duping computer users to download programs that can replicate and clog networks, security experts said.
The virus is spread by e-mails that carry message lines including "SARS" or "I need your help," said a warning issued this week by McAfee Security.
By opening the e-mail, a computer user runs a program that can send copies of a similar message to others in the user's address book.
"This is a mass-mailing worm, which simply spreads via e-mail," McAfee said. "It does not contain a destructive payload. The worm sends itself to all addresses in the Windows address book."
The worm was first discovered on Thursday. Hiding behind names such as "sars.exe," "Hongkong.-exe" and "deaths.exe," it displays a pop-up window with the message "corona virus" when launched.
It modifies the Microsoft Windows registry, adding an entry to ensure it is launched whenever Windows starts.
It also changes the start page for the Internet Explorer web browser, locates the Windows address book and sends copies of itself to contacts in it.
The Security News Portal Web site said that in addition to this new virus, the SARS epidemic "is also causing the scammers and fraudsters to come out from under their rock." offering products such as aerosols to combat the disease.



