Email-Worm.Win32.Alcaul.h
| Alert Level : | Medium |
| Discovered: | Mar 20 2002 |
| Tag: | E-mail Worms |
| Discoverer and Source: | http://www.kaspersky.com/ |
Malware Behavior and Technical Description
This is a virus-worm that spreads via the Internet attached to infected e-mails.
The worm itself is a Windows PE EXE file 5632 bytes in length, and it is written in Visual Basic 6. It is packed by a UPX utility. After unpacking, it is about 16 Kb in length.
Infected messages contain:
Body: the attached file is a compressed picture of a worm... click it..
Attachment: worm.com
The worm activates from infected e-mail only when a user clicks on an attached file. The worm does not install itself to the system and is not activated anymore (except in cases when a user clicks on an attached e-mail again).
To send infected messages, the worm uses MS Outlook and sends messages to all addresses found in Outlook address book.
Installing
While installing, the worm copies itself to disk C: with the name: C:\WORM.COM.
0
Removal Email-Worm.Win32.Alcaul.h instructions:
0
Need help? Live computer support via remote at SupportSpace |
