W32.Inzae.A is a & quot; mail bomb & quot ;, capable of using a private SMTP mail engine to propagate to different computer systems as an e-mail attachment. The worm is written in the Visual Basic v6.0 programming language, which contains some paragraphs written in Visual C ++.
Operating system affected
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Describe:
When executed, W32.Inzae.A will perform the following actions:
1. Manually copy to the system directory with the name svchosl:
% System% svchosl.pif
2. Value added:
& quot; Svchost & quot; = & quot;% System% svchosl.pif & quot;
In the following registry key worm can be run automatically when the system starts:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
Create the following files:
% System% inzax.exe
% System% sw.exe
% System% sx.exe
% System% sh.exe
% System% m.zip
4. Display error messages:
Title: Wolas
Message: Pulse aceptar para seguir ..
or
Title: Final ..
Message: Ya casi estamos listos para empezar si ustd lo est pulse aceptar ...
5. Delete the following extensions:
.asm
.asp
.bmp
.cs
.css
.doc
The list has been shortened, you can refer to here
Copy the following files to drive C, D, E and F:
codm
extasis8.pif
inzae.pif
ph003.pif
rd2_roberto.pif
simbolic3.pif
sin_mas_menos.pif
7. Send an HTTP GET request to a domain of the form: xxxxx.org to check whether the computer is connected to the computer.
8. Use your own SMTP engine to send e-mail to any address found on the victim's computer.
Virus-infected e-mails carry the following characteristics:
From : forged
Subject : (one of the following)
re: Amor verdadero
Re: Como el aire ...
Re: Crees que puede ser verdad?
Re: Déjate de rollos y viv? !!
Re: Eso con queso rima con ... xD
Re: La Luna
re: Neptuno y Mercurio
re: Pisologú}
Re: Voodoo un tanto ps ...
re: xD no me lo puedo creer !!
Message : (one of the following)
No veas que cosas xD, luego me cuentas, chao.
Creos en el amor de verdad ?, miralo y y hablamos, ciaooo
Mi la que que mando ya verás que los detalles mas pequeños son los que importan, ciaoo
Test the verb andas bien de las neuronassss! XD, luego hablamos, chao
Qu? Relación tienen estos planetas?, Miralo y luego me cuentas, chao.
Esa moribunda y solitaria Luna, Impresionante! Chao.
Serre la la negra, sal de dudas ya me cuentas, chao.
No comment, xDD, Nos vemos !!
!
Attachments : (one of the following)
D-Incógnito.zip
EL_rechazo.zip
Love-Me.zip
Moon (Luna) .zip
My life (Mi vida) .zip
Para-Brisas.zip
Planetario.zip
PsúŽuico-Mix.zip
Rimaz.zip
Voodoo! .zip
