Need help? Ask the community or hire an expert.
Go to Avira Answers
Alias:Keyluc, Zacker, Zaker, Christmas.exe
Size:37.376 Bytes 
Damage:Spreads over Microsoft Outlook. 
VDF Version: 

DistributionMaldal.C spreads through the email attachment CHRISTMAS.EXE. When this file is opened, the worm is sent using Outlook to all email addresses it can find in Windows Address Book. The email sent by the worm contains:

Subject: Happy New Year
Body: Hii,
I can't describe my fellings But all I can say is Happy new year :-)
Attachment: Christmas.exe

Technical DetailsAfter performing its email routine, Maldal.C copies itself in Windows directory as Christmas.exe and enters the registry:
[HKLM\Software\Microsoft\Windows\CurrentVerison\Run] "Zacker"="C:\\WINDOWS\CHRISMTAS.EXE"

Maldal.C replaces the Internet Explorer start site with an URL of the Internet Provider
Description inserted by Crony Walker on Tuesday, June 15, 2004

Back . . . .