Local business are being warned that a new virtual postcard from Friend Greetings, owned by a company called Permissioned Media, acts in exactly the same fashion as a virus. The programme first appeared last Thursday.

The programme prompts users to install software to view the card. The user is then presented with an end user licence agreement (EULA) granting Permissioned Media to e-mail all the contacts listed in the user's Outlook Address book. Those people are presented with an e-mail from the user telling them they have a greeting card to pick up.

The programme thus spreads exactly like a worm. Permissioned Media argues that, since the programme requires users to accept it, it cannot be categorised as a virus. In addition to the wormlike way it spreads, the programme also installs spyware designed to deliver advertisements to the user's computer. The user also gives Permissioned Media approval to install further software any time the company wants.

Symantec, a company that provides anti-virus protection is not treating the programme as a virus for similar reasons. Symantec says it is "aware of a widespread e-card (electronic greeting card) that appears to have the characteristics of a worm. Symantec Security Response does not classify this as a malicious threat, and as such, will not detect any files that are associated with the e-card. The installation of software that is associated with the e-card requires your permission for it to perform its mass-mailing functions. If you cancel the installation of the software, no wormlike activities will be performed."

Those who do not want to grant blanket access to their computers will be able to recognise the incoming programme as follows:

The e-mail subject reads: "(Your name), you have an E-Card from (sender"s name)".

The message reads: "Greetings! (Sender"s name) has sent you an E-Card -- a virtual postcard from FriendGreetings.com. You can pickup your E-Card at the FriendGreetings.com by clicking on the link below."

A long link then appears that starts "www.friendsgreetings". Clicking on the link leads to a message that says: "(Your name), I sent you a greeting card. Please pick it up. (Sender's name). Those who click the link are asked if you want to download software so that they can view the e-card.

The installer package requires that users accept two EULAs in order to complete the installation. For users who choose not to accept the agreement, the software is not installed, and no e-card is sent. If the agreement is accepted, the software is installed and sends the previously described e-card to all contacts in the Microsoft Outlook contacts list. Those who pay attention to the multiple screens fed to them by the Internet and value the integrity of their hard drives would, presumably, want to decline this offer. Others, who simply accept whatever is offered on-screen, may come to regret it when advertisements start filling their hard drive.

Perhaps most bizarrely of all, Permissioned Media uses a digital certificate issued by VeriSign subsidiary, Thawte. The whole notion of digital certificates is to provide a high degree of security to users; this use merely guarantees that only Permissioned Media-approved advertisements will be automatically downloaded to users' harddrives.