The following has been derived from information provided by NAI, Sophos, Symantec, and Trend.

Virus Characteristics

This worm spreads as an email attachment, CARTOLINA.VBS. If your computer is infected by this worm, it will use the Microsoft Outlook address book to propagate itself. It will not be able to propagate itself if Outlook is not installed on your computer.

It will try to send itself out each time that the attachment is executed. It also will change the default page of Internet Explorer to http://www.vije.it, an Italian music web site.

This is a Visual Basic Script virus. It's only purpose is to spread to other systems using built-in functions of VBScript via Outlook messaging.

This virus may arrive by email in the following format:

Subject = C'è una cartolina per te!
Body = Ciao, un tuo amico ti ha spedito una cartolina virtuale... mooolto particolare!
Attachment = Cartolina.vbs


Payload

Large scale e-mailing: All the addresses in Microsoft Outlook address book
Degrades performance: May clog mail servers