|
Description:
This memory-resident worm spreads copies of itself as an attachment to email messages that it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine. This SMTP engine enables this worm to send bulk messages without having to use other email applications like, Outlook Express.
The following is a sample of an email message that it sends:
(Note: For the complete details of the email message this worm sends, refer to the Technical Details section.)
The said email message seems to be a spoofed version supposedly coming from eBay.
It also propagates by dropping a copy of itself to shared folders used by popular peer-to-peer (P2P) file sharing applications, such as Limewire, Kazaa, Morpheus, and Imesh. This makes the worm copy available for download to unsuspecting users.
In addition, this worm downloads a file from a list of URLs. The downloaded file is saved as FLG.EXE. This routine puts affected users on risk of downloading possibly-malicious files.
For additional information about this threat, see:
Solution
Technical Details
Description created: Sep. 29, 2005 3:10:56 AM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
