¿Necesita ayuda? Pregunte a la comunidad o contrate a un experto.
Ir a Avira Answers
Size:1.142.044 Bytes 
Damage:Spreads by email. 
VDF Version: 

DistributionIt sends itself to all contacts in Microsoft Outlook. The email has the following structure:

Subject: %receipient% you have an E-Card from %Sender%

Body: Greetings! %Sender% has sent you an E-Card -- a virtual postcard from FriendGreetins.com. You can pickup your E-Card at the FriendGreetings.com by clicking on the link below. http://www.friendgreetings.com/pickup/pickup.aspx?code=xxxxxxxxx&id=xxxxxxxxx Message: ------------------------------------------------------------------------ %receipient% I sent you a greeting card. Please pick it up. %Sender% ------------------------------------------------------------------------

Technical DetailsWorm/FriendGreet is not really a 'normal' a virus or worm. It sends itself to all contacts in Microsoft Outlook. Before sending emails, the user has to agree the End User License Agreements (EULA). When such an email is received, and the link it contains is accessed, the standard browser is opened (eg Internet Explorer). While accessing this website, a Security Warning window is displayed and the worm is installed.
By pressing 'YES', the file "Friend Greetings.msi" or "Friend%20Greetins.msi" is downloaded. If there is no MSI Installations Software on the computer, it will be downloaded, too. When "Friend Greetings.msi" is installed, the End User License Agreements (EULA) window is displayed, which explains that the "Permissioned Media Inc." program can send itself to all contacts in Microsoft Outlook.
The 'End User License Agreements' (EULA) must be agreed.
This program has no particular payload.
Descripción insertada por Crony Walker el martes, 15 de junio de 2004

Volver . . . .