Need help? Ask the community or hire an expert.
Go to Avira Answers
Alias:
Type:Worm 
Size: 
Origin: 
Date:05-23-2002 
Damage:Spreads over Peer-to-Peer network KaZaA.  
VDF Version:6.23.00.00 
Danger:Low 
Distribution:Low 

DistributionThe directory C:\Windows\Temp\Sys32\ is registered as shared folder by P2P KaZaA software, so that the KaZaA user will unintentionally download the worm.

Technical DetailsWorm/Kazaa is a worm that spreads over Peer-to-Peer network KaZaA. This network is used for transferring programs, games, movies etc.
When an infected file is opened, a dialog window is displayed:
"Error
Access error #03A:94574: Invalid pointer operation
File possibly corrupted
[ OK ]"

The worm copies itself in Windows system directory as Explorer.scr and makes the registry autostart entry:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "System-Service"="C:\Windows\System\Explorer.scr"

A second registry entry with 20 hexadecimal characters is also made:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Syscod] "syscod"="007A5000000758A6BEA1"

Then, the worm is copied in about 1000 different files in C:\Windows\Temp\Sys32\. All these files are named after well known movies and programs. This increases the chances for the worm to be opened. The file names can be:

A.I-Artificial Intelligence- divx -full-downloader
A.I-Artificial Intelligence- Filme -full-downloader
ABeautifulMind
AbsoluteZero-installer
Adobe InDesign 2.0 Build 416 -full-downloader
Adobe Pagemaker -full-downloader
Adobe Photoshop 6.0 -full-downloader
Adobe Photoshop update (6.1) -full-downloader
After Dark Deluxe-Bildschirmschoner-full-downloader
Age of Empires 2- Games -full-downloader
Age of Empires 2 Gold +Strat.Comm.-Games-full-downloader
Age of Empires 2 Gold +Strat.Comm.-Spiel-full-downloader
Age of Empires Screensaver
Age of Mythology - Games -full-downloader
Age of Mythology (Beta) -full-downloader
Age of Wonders II The Wizard#39s-installer
Airxonix -full-downloader
Alarm Stufe Rot 2 -full-downloader
Alarm Stufe Rot 2 Yuris Rache -full-downloader
Alfred Hitchcock - The Final Cut - Games -full-downloader
Alien vs. Predoator 2-Games-full-downloader
Alien vs. Predoator 2-Spiel-full-downloader
All Serials
Allout-Games-full-downloader
Almost Famous-Komödie-Filme-full-downloader
American McGee#39s Alice-Games-full-downloader
American McGee#39s Alice-spiel-full-downloader
American Pie 2 -divx-full-downloader
American Pie 2- Filme -full-downloader
American Pie 2-divx-full-downloader
American Pie -divx-full-downloader
Anam
Anno 1503 (Beta) -full-downloader
Anno 1503- Games -full-downloader
Anno 1602 Königs Edition Classic- Games -full-downloader
Anno 1602 Königs Edition Classic-Spiel-full-downloader
Anstoss 3 -full-downloader
Appz
Aquanox -full-downloader
aquanox-full-downloader
AsterixundOberlix ...

The file name is followed by a various number of empty spaces and the extension .exe or .scr.
Description inserted by Crony Walker on Tuesday, June 15, 2004

Back . . . .