Find a Partner
This window is encrypted for your security.
Need help? Ask the community or hire an expert.
Go to Avira Answers
Sent by email to the first 100 addresses found in Outlook
The worm spreads using the Address Book:
FW: You have one Minute to find the peach
FW: Find the peach
>Try finding the peach
>I don´t usually send this things, but..
followed by: ! or :-) or :) or =) or :-]
find the peach.pdf
joke.pdf oder search.pdf
The virus needs Adobe Acrobat to be installed, to spread on your system.
If you have a Freeware Version of Acrobat Reader, PDF/Peach cannot install its virus code.
If you open the PDF file attachment, you will see a picture with the following title:
You have one minute to find the peach!
If the picture is double-clicked, the worm is activated, starts its virus code and installs it in Windows TEMP directory:
PDF/Peach spreads using Outlook and makes the following Registry entry, which prevents it from being sent again:
HKLMSoftwareOUTLOOK.PDFWorm Version 1.0 By Zulu
Finally,it deletes the files it created in TEMP folder.
Description inserted by Crony Walker on Tuesday, June 15, 2004