Are there any definitions for win32.Lohack.A,B,C ?

Discussion in 'NOD32 version 2 Forum' started by test, Jul 21, 2003.

Thread Status:
Not open for further replies.
  1. test

    test Guest

    Or is it under some different name, the name provided is from KAV.

    When W32.Lohack.C.Worm is executed, it performs the following actions:

    Copies itself to the download directories of KaZaA and iMesh as filenames with the .exe extension:
    Microsoft Excel Password Recovery (All Versions)
    Microsoft Word Password Recovery (All Versions)
    Microsoft Access Password Recovery (All Versions)
    Microsoft Office Password Recovery (All Versions)
    Windows Screen Saver Password Recovery (All Versions)
    RAR Password Recovery
    ZIP Password Recovery
    ICQ Password Recovery (All Versions)
    Emulator Downlaoder
    XBox Secrets
    Microsoft Office XP Key Generator
    Norton Antivirus 2003 Beta Downloader
    Age of Empires 2 Crack
    ICQ Banner Remover
    KaZaA Spyware Remover
    DivX Lastest Beta
    KaZaA 2.0 Lastest Beta
    Xuxa nua
    Tiazinha nua
    Britney Spears Nude
    WinRar and Crack
    WinZip 8.0 and Serial
    MIB episode 2 Downloader
    GTA3 Secrets
    GTA3 Crack
    Half-life Secrets
    Warcraft 3 Secrets
    Quake 4 Lastest Beta
    Windows Secrets
    Windows (All Versions) Key Generator
    Windows XP Crack
    Windows XP Serial Generator
    Windows XP Key Generator
    XBox Emulator

    Creates an Internet shortcut file with the same filenames and a .url extension, which points to a virus exchange Web site.

    Searches for the email addresses in the files with the extensions:

    Sends itself to the email addresses it finds through MAPI, with the following email characteristics:
    Windows update

    Message body:
    Install this Windows update (for all versions).

    Attachment name:
Thread Status:
Not open for further replies.