Type: Worm In the wild: Yes Reported Infections: Low Distribution Potential: Low Damage Potential: Medium Static file: Yes File size: 27.648 Bytes MD5 checksum: 301b39b3e6aafb7cae5a9d84e1c78cf6
General Method of propagation: Aliases: Platforms / OS: Side effects: Files %WINDIR% \avpguard.exe Registry %WINDIR% \avpguard.exe -av serv" Email From: To: Subject: %username from receiver's email address% , your product; %username from receiver's email address% , your letter; %username from receiver's email address% , your archive; %username from receiver's email address% , your text; Re:%username from receiver's email address% , your bill; Re:%username from receiver's email address% , your details; Re:%username from receiver's email address% , my details; Re:%username from receiver's email address% , your word file; %username from receiver's email address% , your excel%username from receiver's email address% , details; %username from receiver's email address% , Approved; %username from receiver's email address% , your%username from receiver's email address% , your%username from receiver's email address% , Here; %username from receiver's email address% ,%username from receiver's email address% ; %username from receiver's email address% , Hi; Re: Re:%username from receiver's email address% , your message; Re:%username from receiver's email address% , your picture; %username from receiver's email address% , here is the%username from receiver's email address% ,%username from receiver's email address% ,%username from receiver's email address% ,%username from receiver's email address% ,%username from receiver's email address% ,%character string% .freepage.com, your website; Na%username from receiver's email address% ; Best %username ; Love %username from receiver's ; Good morning %username from receiver's email ; Have a good day %username from receiver's email ; Dear %username from receiver's email address% ; To%username from receiver's email address% , it's me; Welcome%username from receiver's email address% ; Moin %username ; Hello %username from receiver's ; Your account %username from receiver's email is expired!; Hey %username from receiver's email ; Hi %username from receiver's email address% ; Hi%username from receiver's email address% ; Moi %username ; He %username from receiver's ; Yours faithfully, %username from receiver's ; Message to %username from receiver's email ; Hi Mrs. %username from receiver's email address% ; %username from receiver's email address% .doc yours?; Is%username from receiver's email address% .xls yours?; Whats up%username from receiver's email address% ; Hi; Your product; %character string% .%character string% .%character string% .%character string% .%character string% .%character string% .Attachment: %character string% .pif; your_product_%character .pif; letter_%character string% .pif; %character string% .pif; your_text%character .pif; bill_%character string% .pif; %character string% .pif; %character _details.pif; %character string% _document_word.pif; %character string% _document_excel.pif; %character _my_details.pif; %character _all_document.pif; %character _application.pif; mp3music_%character string% .pif; %character string% .pif; document_%character 4351.pif; %character string% _picture.pif; %character string% _file.pif; %character _message_details.pif; yourpicture%character .pif; %character string% _document_full.pif; %character string% _your_message_part2.pif; %character information.pif; %character string% document.pif; %character string% _your_document.pif Mailing Search addresses: Miscellaneous String: File details Runtime packer:
Description inserted by Petre Galan on Friday, March 5, 2010
Back
.
.
.
.
