Contact
About Avira
Press
Beta test
Language:
English
English
Deutsch
Français
Español
Italiano
Português
Русский
For Home
Avira Antivirus Premium
Avira Internet Security
For Business
Client/Servers
Avira Professional Security
Avira Server Security
Avira Business Security Suite
Avira Endpoint Security
Small Business
Managed Services
Gateways
Avira AntiVir MailGate
Avira MailGate Suite
Avira AntiVir Exchange
Avira AntiVir WebGate
Avira WebGate Suite
Avira AntiVir GateWay Bundle
Avira AntiVir SharePoint
Integration
Anti-Malware SDK (SAVAPI)
Antispam SDK (SPACE)
Rebranding & Bundling
Integration Services
Educational Discount
Support
For Home
Overview
Latest News
Video Tutorials
Knowledgebase
For Business
Overview
Latest News
Knowledgebase
Virus Lab
Virus Descriptions
Statistics
VDF History
About Malware
Viruses In the Wild
Submit Suspicious File
Download
Product Downloads
Technical Documentation
Product Lifecycle
VDF Update
Partner
Partner Locator
Become an Avira Partner
Affiliate
Free
Download
Search
Summary
Full description
Statistics
Alias:
Type:
Worm
Size:
73.728 Bytes
Origin:
Date:
03-07-2001
Damage:
Sent by email.
VDF Version:
6.23.00.00
Danger:
High
Distribution:
Low
Distribution
The worm sends itself using Outlook Address Book. The email's structure:
Subject: Fw: Naked Wife
Body: My wife never look like that ;-)
Best Regards, %sender's name%
Attachment: NakedWife.exe
Technical Details
If the attachment NAKEDWIFE.EXE is opened, a false Macromedia Flash Player program opens. On the same time, the virus sends itself to all addresses in MS Outlook. Then, it starts its damage routine, deleting the following files from Windows directory: .INI .LOG .DLL .EXE .COM .BMP and from Windows System directory: .INI .LOG .DLL .EXE .BMP. The virus payload is activated only once, when opening the attachment NAKEDWIFE.EXE. Afterwards, the virus remains inactive. The false player program shows a window with a "JibJab Loading..." message, which was programmed as an endless routine. If you choose the option "About Macromedia Flash Player 5..." in the Help Menu, a window appears with the message: "You're are now FUCKED! (C) 2001 by BGK (Bill Gates Killer).
Description inserted by Crony Walker on Tuesday, June 15, 2004
Back
.
.
.
.