Aliases: W32.Caric@mm, W32/MyLife.b@MM
Type: Win32 worm
Date: 22 March 2002
Sophos has received several reports of this worm from the wild.
W32/Caric-A is a worm which arrives in an email with the
Subject line: bill caricature
Attached file: cari.scr
How are youuuuuuuu?
look to bill caricature it's vvvery verrrry ffffunny :-) :-)
i promise you will love it? ok
========No Viruse Found========
If you run the attachment and Outlook is installed, then
W32/Caric-A will send itself to the addresses in your address book. The worm also displays a cartoon of a man wearing a "Bill" badge and playing a saxophone.
The worm saves a copy of itself in the Windows system folder and adds the following value to the registry:
CurrentVersion\Run\win = "C:\Windows\System\cari.scr"
Read the analysis at
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100
|« Previous Thread | Next Thread »|
|Thread Tools||Search this Thread|