L
~Lazarus~
Guest
Please be advised of a new mass mailer worm that has been reported to exist in the wild The name of this worm is W32.Vote.A@mm. When executed, it will email itself out to all email addresses in the Microsoft Outlook address book. The worm will insert two .vbs files on the system, and it will also attempt to delete files from several antivirus products.
Delete any email you receive with the subject Fwd
eace BeTweeN AmeriCa and IsLaM!
Do not open any emails with the attachment WTC.exe
When executed, the worm will attempt to email itself to all contacts in the Microsoft Outlook address book. The email will appear as follows.
Subject: Fwdeace BeTweeN AmeriCa and IsLaM!
Message:
Hi
iS iT A waR Against AmeriCa Or IsLaM !?
Let's Vote To Live in Peace!
Attachment: WTC.EXE
What to expect if you open the message and click on the WTC.EXE
The worm will insert two .vbs files on the system:
\<Windows folder>\ZaCker.vbs
\<Windows\System folder>\MixDaLaL.vbs
The worm will attempt to delete all files from several folders.
The worm will attempt to download and execute a file.
As the file is executed, it will look through all folders on all fixed drives and network drives for files with the extensions .htm or .html. If such a files are found, they are overwritten with the message:
AmeRiCa ...Few Days WiLL Show You What We Can Do !!! It's Our Turn >>> ZaCkEr is So Sorry For You
When executed at the next restart, this file will attempt to delete all files in the \Windows folder.
Next, the worm will create or overwrite the file C:\Autoexec.bat. Inside the file there will be a command that formats the C drive. The Autoexec.bat file is executed on Windows 95/98/Me and DOS systems when you start the computer.
Delete any email you receive with the subject Fwd
eace BeTweeN AmeriCa and IsLaM! Do not open any emails with the attachment WTC.exe
When executed, the worm will attempt to email itself to all contacts in the Microsoft Outlook address book. The email will appear as follows.
Subject: Fwd
eace BeTweeN AmeriCa and IsLaM!Message:
Hi
iS iT A waR Against AmeriCa Or IsLaM !?
Let's Vote To Live in Peace!
Attachment: WTC.EXE
What to expect if you open the message and click on the WTC.EXE
The worm will insert two .vbs files on the system:
\<Windows folder>\ZaCker.vbs
\<Windows\System folder>\MixDaLaL.vbs
The worm will attempt to delete all files from several folders.
The worm will attempt to download and execute a file.
As the file is executed, it will look through all folders on all fixed drives and network drives for files with the extensions .htm or .html. If such a files are found, they are overwritten with the message:
AmeRiCa ...Few Days WiLL Show You What We Can Do !!! It's Our Turn >>> ZaCkEr is So Sorry For You
When executed at the next restart, this file will attempt to delete all files in the \Windows folder.
Next, the worm will create or overwrite the file C:\Autoexec.bat. Inside the file there will be a command that formats the C drive. The Autoexec.bat file is executed on Windows 95/98/Me and DOS systems when you start the computer.
