Нужен совет? Обратитесь за помощью к сообществу или специалистам.
Перейти к Avira Answers
Alias:VBS/PeachyPDF@MM
Type:Worm 
Size:variable 
Origin: 
Date:08-09-2001 
Damage:Sent by email to the first 100 addresses found in Outlook 
VDF Version:6.23.00.00 
Danger:Low 
Distribution:High 

DistributionThe worm spreads using the Address Book:
Subject:

?FW: You have one Minute to find the peach?
?FW: Find the peach?
?FW: Find?
?FW: Peach?
?FW: Joke?


Body:

?>Try finding the peach?
?>Try this?
?>Interesting search?
?>I dont usually send this things, but..?

followed by: ?!? or ?:-)? or ?:)? or ?=)? or ?:-]?

Attachment:

find.pdf
peach.pdf
find the peach.pdf
find_the_peach.pdf
joke.pdf oder search.pdf


Technical DetailsThe virus needs Adobe Acrobat to be installed, to spread on your system.
If you have a Freeware Version of Acrobat Reader, PDF/Peach cannot install its virus code.
If you open the PDF file attachment, you will see a picture with the following title:
?You have one minute to find the peach!?

If the picture is double-clicked, the worm is activated, starts its virus code and installs it in Windows TEMP directory:

Peach.vbs
Peach.vbe
Peach.wsf
Peach.jpg


PDF/Peach spreads using Outlook and makes the following Registry entry, which prevents it from being sent again:

HKLMSoftwareOUTLOOK.PDFWorm ?Version 1.0 By Zulu?

Finally,it deletes the files it created in TEMP folder.


Описание добавил Crony Walker в(о) вторник, 15 июня 2004 г.

Назад . . . .
https:// Это окно зашифровано для вашей безопасности.