Malware type: Worm

Aliases: W32/Maldal.d@MM (McAfee), W32.Maldal.gen@mm (Symantec), Worm/Maldal.E (Avira), W32/Maldal-D (Sophos),

In the wild: No

Destructive: Yes

Language: English

Platform: Windows

Encrypted: No

Description: 
This destructive, memory-resident worm deletes antivirus files and files with the following extensions from the Windows, Personal, and Program Files folders:

• JPG
• PPS
• MPEG
• PHP
• INI
• DAT
• TXT
• ZIP
• COM
• LOG

This worm propagates through email using Microsoft Outlook. It usually obtains email addresses from .HTM and .HTML files found in the local drives and sends infected email attachments to those addresses. It sends email with the following characteristics:

Subject: <Computer Name> or ZaCker
Message body: <Any of the following>
Test this game
I wish u like it
I have got this file for you
Surprise !!!
download this game & have fun ;)
desktop maker ,you may need it ;)
have you ever got a gift !?
What women wants !
Don’t waste any time ,Subscribe now
Make your pc funny !
new program from my fun groups
Map of the world
Create your Ecard
Send it to everybody you love
Its made by me ;)
Our symbol
If you have an elegant taste
Test your mind
Singer, searsh for any song and sing
For everybody wants to marry a woman that he doesn’t love !
nowadays ,there is no womanhood !!! ;P
Just Try to fix it
Keep this advertisements run and earn 0.25 $ per minute ;)
See this file
Attachment: <Computer Name>.EXE or ZaCker.EXE

For additional information about this threat, see:
Solution
Technical Details

Description created: Dec. 29, 2001 4:02:22 PM GMT -0800
Description updated: Dec. 29, 2001 4:11:37 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.