Need help? Ask the community or hire an expert.
Go to Avira Answers
Alias:Keyluc, Zacker, Zaker, Christmas.exe
Type:Worm 
Size:37.376 Bytes 
Origin: 
Date:12-21-2001 
Damage:Spreads over Microsoft Outlook. 
VDF Version:6.23.00.00 
Danger:Medium 
Distribution:Low 

DistributionMaldal.C spreads through the email attachment CHRISTMAS.EXE. When this file is opened, the worm is sent using Outlook to all email addresses it can find in Windows Address Book. The email sent by the worm contains:

Subject: Happy New Year
Body: Hii,
I can't describe my fellings But all I can say is Happy new year :-)
bye
Attachment: Christmas.exe

Technical DetailsAfter performing its email routine, Maldal.C copies itself in Windows directory as Christmas.exe and enters the registry:
[HKLM\Software\Microsoft\Windows\CurrentVerison\Run] "Zacker"="C:\\WINDOWS\CHRISMTAS.EXE"

Maldal.C replaces the Internet Explorer start site with an URL of the Internet Provider Geocities.com.
Description inserted by Crony Walker on Tuesday, June 15, 2004

Back . . . .