PDA

View Full Version : Are there any definitions for win32.Lohack.A,B,C ?


test
July 21st, 2003, 11:47 PM
Or is it under some different name, the name provided is from KAV.


When W32.Lohack.C.Worm is executed, it performs the following actions:


Copies itself to the download directories of KaZaA and iMesh as filenames with the .exe extension:
Microsoft Excel Password Recovery (All Versions)
Microsoft Word Password Recovery (All Versions)
Microsoft Access Password Recovery (All Versions)
Microsoft Office Password Recovery (All Versions)
Windows Screen Saver Password Recovery (All Versions)
RAR Password Recovery
ZIP Password Recovery
ICQ Password Recovery (All Versions)
Emulator Downlaoder
XBox Secrets
Microsoft Office XP Key Generator
Norton Antivirus 2003 Beta Downloader
Age of Empires 2 Crack
ICQ Banner Remover
KaZaA Spyware Remover
DivX Lastest Beta
DivX
KaZaA 2.0 Lastest Beta
Xuxa nua
Tiazinha nua
Britney Spears Nude
WinRar and Crack
WinZip 8.0 and Serial
MIB episode 2 Downloader
GTA3 Secrets
GTA3 Crack
Half-life Secrets
Warcraft 3 Secrets
Quake 4 Lastest Beta
Windows Secrets
Windows (All Versions) Key Generator
Windows XP Crack
Windows XP Serial Generator
Windows XP Key Generator
XBox Emulator


Creates an Internet shortcut file with the same filenames and a .url extension, which points to a virus exchange Web site.


Searches for the email addresses in the files with the extensions:
.IDX
.NCH
.MDX
.DBX
.MSG
.EML
.TXT
.HTM


Sends itself to the email addresses it finds through MAPI, with the following email characteristics:
Subject:
Windows update

Message body:
Install this Windows update (for all versions).

Attachment name:
windows_update.txt.exe