Precisa de ajuda? Peça à comunidade ou contrate um perito.
Acesse a Avira Answers
Size:5.132 Bytes 
Damage:Sent by email. 
VDF Version: 

DistributionThe email worm Fireburn sends itself to all entries in Outlook Address Book.
If the infectious attachment is opened on a German computer, the email sends German texts. These can look like this:

Hi, wie geht's dir?
Guck dir mal das Photo im Anhang an, ist echt geil ;)
bye, bis dann.

If the virus is activated on an English system, the email looks like this:

Hi, look at that nice Pic attached!
Watching it is a must ;)
cu later...



Technical DetailsThe worm makes the following registry key entry:


Its payload is activated on the 20th of June. The following message appears on the screen:

I'm proud to say that you are infected by FireburN!

Then, the mouse and the keyboard are deactivated. This can not be canceled by restoring the data. The registry entries for keyboard and mouse deactivating are:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Shut_Up rundll32 mouse,disable
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Shut_Up2 rundll32 keyboard,disable
Descrição enviada por Crony Walker em terça-feira, 15 de junho de 2004

Voltar . . . .