Alias:Keyluc, Zacker, Zaker, Christmas.exe
Type:Worm 
Size:37.376 Bytes 
Origin: 
Date:12-21-2001 
Damage:Spreads over Microsoft Outlook. 
VDF Version:6.23.00.00 
Danger:Medium 
Distribution:Low 

DistributionMaldal.C spreads through the email attachment CHRISTMAS.EXE. When this file is opened, the worm is sent using Outlook to all email addresses it can find in Windows Address Book. The email sent by the worm contains:

Subject: Happy New Year
Body: Hii,
I can't describe my fellings But all I can say is Happy new year :-)
bye
Attachment: Christmas.exe

Technical DetailsAfter performing its email routine, Maldal.C copies itself in Windows directory as Christmas.exe and enters the registry:
[HKLM\Software\Microsoft\Windows\CurrentVerison\Run] "Zacker"="C:\\WINDOWS\CHRISMTAS.EXE"

Maldal.C replaces the Internet Explorer start site with an URL of the Internet Provider Geocities.com.
Descripción insertada por Crony Walker el martes 15 de junio de 2004

Volver . . . .