Besoin d’aide ? Fais appel à la communauté ou embauche un spécialiste.
Aller à Avira Answers
Alias:VBS/PeachyPDF@MM
Type:Worm 
Size:variable 
Origin: 
Date:08-09-2001 
Damage:Sent by email to the first 100 addresses found in Outlook 
VDF Version:6.23.00.00 
Danger:Low 
Distribution:High 

DistributionThe worm spreads using the Address Book:
Subject:

“FW: You have one Minute to find the peach”
“FW: Find the peach”
“FW: Find”
“FW: Peach”
“FW: Joke”


Body:

“>Try finding the peach”
“>Try this”
“>Interesting search”
“>I don´t usually send this things, but..”

followed by: “!“ or “:-)“ or “:)“ or “=)“ or “:-]“

Attachment:

find.pdf
peach.pdf
find the peach.pdf
find_the_peach.pdf
joke.pdf oder search.pdf


Technical DetailsThe virus needs Adobe Acrobat to be installed, to spread on your system.
If you have a Freeware Version of Acrobat Reader, PDF/Peach cannot install its virus code.
If you open the PDF file attachment, you will see a picture with the following title:
„You have one minute to find the peach!“

If the picture is double-clicked, the worm is activated, starts its virus code and installs it in Windows TEMP directory:

Peach.vbs
Peach.vbe
Peach.wsf
Peach.jpg


PDF/Peach spreads using Outlook and makes the following Registry entry, which prevents it from being sent again:

HKLMSoftwareOUTLOOK.PDFWorm “Version 1.0 By Zulu”

Finally,it deletes the files it created in TEMP folder.


Description insérée par Crony Walker le mardi 15 juin 2004

Retour . . . .
https:// Cet écran est crypté pour votre sécurité.