| 1. | Email-Worm.BAT.Alcobul.a
This worm spreads via the Internet as an attachment to infected messages. It also spreads via IRC channels. It is a BAT file. It is 2083 bytes in size.
Installation
Once launched, the worm copies its body to the Windows directory as "UpgradeToWindowsXP.bat":
C:\Windows\UpgradeToWindowsXP.bat
It...
|
| 2. | Email-Worm.BAT.Alcobul.b
This worm spreads via the Internet as an attachment to infected messages. It also spreads via IRC channels. It is a BAT file. It is 4536 bytes in size.
Installation
Once launched, the worm copies its body to the following directories under the names shown below:
C:\XP\xp.bat
C:\Recycled\xp.bat
C:...
|
| 3. | Email-Worm.BAT.Krim.b
This worm spreads via the Internet as an attachment to infected messages. It also spreads via IRC channels. It is a BAT file. It is 6381 bytes in size.
Installation
Once launched, the worm copies its body to the C: root directory as "amore.bat":
C:\amore.bat
In order to ensure that the worm is...
|
| 4. | Email-Worm.BAT.Krim.a
This worm spreads via the Internet as an attachment to infected messages. It also spreads via IRC channels. It is a BAT file. It is 5434 bytes in size.
Installation
Once launched, the worm copies its body to the C: root directory as "zkm.bat":
C:\zkm.bat
In order to ensure that the worm is...
|
| 5. | Email-Worm.HTML.Jer
This is an Internet worm that spreads through IRC channels and also intends to spread via e-mail, but fails because of bugs in its code.
Installation
The worm has been placed by its author on a page on the www.geocities.com. The page has the title:
"<< THE 40 WAYS WOMEN FAIL IN BED".
On 2...
|
| 6. | Email-Worm.JS.CoolNow
This is a virus-worm that spreads via the Internet using MSN Messenger (instant messaging program). The worm itself is a JS-script (Java Script) located in an HTML file. It sends messages that contain an URL pointing to an infected Web page.
When the worm is executed, it obtains the MSN Messenger...
|
| 7. | Email-Worm.JS.Gigger
This is a dangerous worm. It replicates using Outlook, Outlook Express
and mIRC. The worm is written in JavaScript and Visual Basic Script (VBS).
It contains destructive payload routines that are able to format the
user's hard disk after reboot, and can delete all files on all available
disks....
|
| 8. | Email-Worm.JS.Mountoni
This email worm will send itself to all email address in the MS Outlook address book. The file is 1,373 bytes in size.
Installation
The worm copies itself to the current user's start menu as "WinBoot.js". This ensures that the worm will be launched next time the system is started:
%Documents and...
|
| 9. | Email-Worm.JS.Nevezed
Nevezed is a worm virus spreading via Microsoft Outlook. The worm itself is a Java Script file about 4KB in size and written in Java.
Installation
During installation the worm copies itself to the Windows system StartUp directory under the name "StartUp.js" and the Windows System directory...
|
| 10. | Email-Worm.JS.Sigbug
This malicious program is an HTML email worm. It sends itself to all email addresses in the address book. On 31st May, the worm will disable the graphical user interface on Win9x systems. It is 1,889 bytes in size. It is written in JavaScript.
Installation
When installing, the worm copies itself...
|
