02.03.07 21:39 GMT
| comments (1)
Status : moderate risk
Kaspersky Lab has detected a mass mailing of Email-Worm.Win32.Zhelatin.o, which is spreading as an attachment to infected emails.
Zhelatin.o is very similiar to the first Zhelatin variant - Zhelatin.a.
The Kaspersky anti-virus databases have been updated and users are recommended to update as soon as possible.
Possible subjects in infected emails:
- I Always Knew
- I Am Lost In You
- I Believe
- I Can't Function
- I Dream of you
- I Give to You
- I Love Thee
- I Love You Mower
- I Love You So
- I Love You Soo Much
- I Love You with All I Am
- I Still Love You
- I Think of You
- I Win with You
- I Woof You
Possible names for attachments containing the body of the worm:
- Postcard.exe
- flash postcard.exe
- greeting card.exe
- greeting postcard.exe
Possible texts in the emails:
- You + Me
- You Are My Guiding Star
- You Asked Me Why
- You Brighten My Day
- You Lucky Duck!
- You Rock Me!
- You Were Worth the Wait
- You and I
- You and I Forever
- You are out of this world
- You're My Hero
- You're Soo kissable
- You're so Far Away
- You're the One
- Your Love Has Opened
- Your Silly Smile
- flash postcard.exe
- greeting card.exe
- greeting postcard.exe
A detailed description of Email-Worm.Win32.Zhelatin.o is now available in the Kaspersky Virus Encyclopaedia.
