Worm/Aphex.2 - Worm

See also

Full description

Alias:	I-Worm.Aplore, W32/Aplore@MM
Type:	Worm
Size:
Origin:
Date:	00-00-0000
Damage:	Worm/Aphex.2 makes a registry entry and copies itself.
VDF Version:	6.23.00.00
Danger:	Low
Distribution:	Low

DistributionThe worm sends itself to all email addresses it can find in the Address Book. The email has the following form:

The subject and the body contain only "."
Attachment: psecure20x-cgi-install.version6.01.bin.hx.com

Technical DetailsWhen activated, the worm copies itself in System directory as "EXPLORER.EXE" and makes the registry entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Explorer= "%SystemDIR%\EXPLORER.EXE"
It also copies two files in System directory:
index.html
aphex.jpg

See a brief description here.

Description inserted by Crony Walker on Tue, 15 Jun 2004 14:00 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back