PDF/Peach - Malware

Siehe auch

Vollständig

Alias:	VBS/PeachyPDF@MM
Type:	Worm
Size:	variable
Origin:
Date:	08-09-2001
Damage:	Sent by email to the first 100 addresses found in Outlook
VDF Version:	6.23.00.00
Danger:	Low
Distribution:	High

DistributionThe worm spreads using the Address Book:
Subject:

FW: You have one Minute to find the peach
FW: Find the peach
FW: Find
FW: Peach
FW: Joke

Body:

>Try finding the peach
>Try this
>Interesting search
>I don´t usually send this things, but..

followed by: ! or :-) or :) or =) or :-]

Attachment:

find.pdf
peach.pdf
find the peach.pdf
find_the_peach.pdf
joke.pdf oder search.pdf

Technical DetailsThe virus needs Adobe Acrobat to be installed, to spread on your system.
If you have a Freeware Version of Acrobat Reader, PDF/Peach cannot install its virus code.
If you open the PDF file attachment, you will see a picture with the following title:
You have one minute to find the peach!

If the picture is double-clicked, the worm is activated, starts its virus code and installs it in Windows TEMP directory:

Peach.vbs
Peach.vbe
Peach.wsf
Peach.jpg

PDF/Peach spreads using Outlook and makes the following Registry entry, which prevents it from being sent again:

HKLMSoftwareOUTLOOK.PDFWorm Version 1.0 By Zulu

Finally,it deletes the files it created in TEMP folder.

Kurzfassung hier.

Beschreibung erstellt von Crony Walker am Tue, 15 Jun 2004 14:00 (GMT+1)

» Über Malware
» Über Phishing
» In-the-Wild-Viren

« zurück