Malware type: Worm

Aliases: P2P-Worm.Win32.Blinkom.a (Kaspersky), New Malware.b !! (McAfee), W32.Venzu.Worm (Symantec), Worm/Blinkom.B1 (Avira), W32/Blinkom-A (Sophos), Worm:Win32/Blinkom (Microsoft)

In the wild: No

Destructive: Yes

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Encrypted: No

Description: 
This worm propagates via shared network drives. It has a built-in Simple Mail Transfer Protocol (SMTP) engine that allows it to mass mail copies of itself. It can also propagate via Internet Relay Chat (mIRC).

This worm kills several firewall programs and lowers the Microsoft Office macro security settings of the infected system. It displays a message, drops several text files and copies of itself in the infected system's root and Windows directory.

This worm modifies the Desktop wallpaper so that it connects to a Hypertext Mark-up Language (HTML) file that displays this message:

you’re infected.

For additional information about this threat, see:
Solution
Technical Details

Description created: Sep. 2, 2002 4:49:39 AM GMT -0800
Description updated: Sep. 2, 2002 6:17:36 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.