Matthew:
W32/Maldal-G is a worm which spreads as an email attachment.
The subject of the email is "ZaCker".
The name of the attachment is ZaCker.exe.
The email message text is chosen randomly from the following list :
Test this game
I wish u like it
I have got this file for you
Surprise !!!
download this game & have fun ;)
desktop maker ,you may need it ;)
have you ever got a gift !?
What women wants !
Don't waste any time ,Subscribe now
Make your pc funny !
new program from my fun groups
Map of the world
Create your Ecard
looooooooooooooooool
Send it to everybody you love
Its made by me ;)
Our symbol
If you have an elegant taste
Test your mind
1 + 1 = 3 !!!
See this file
Singer , searsh for any song and sing ;)
For everybody wants to marry a woman that he doesn't love !
nowadays , there is no womanhood !! :P
Just Try to fix it
Keep these advertisements run and earn 0.25 $ per 10 minute ;)
When the worm is run it will display a fake error message.
The message title is :
Project1
The fake message is :
Run time error '71'
Object required
The worm will then create a copy of itself named win.exe in the Windows system folder and add the registry value
HKLM\Software\Microsoft\Windows\
CurrentVersion\run\System
which contains the name of the copy.
The worm will also attempt to delete files used by anti-virus and other security software from the following directories :
Program Files\Zone Labs
Program Files\AntiViral Toolkit Pro
Program Files\Command Software\F-PROT95
eSafe\Protect
PC-Cillin 95
PC-Cillin 97
Program Files\Quick Heal
Program Files\FWIN32
Program Files\FindVirus
Toolkit\FindVirus
f-macro
Program Files\McAfeeVirusScan95
Program Files\Norton AntiVirus
TBAVW95
VS95
rescue
It will also delete files which have the following extensions
HTM
PHP
HTML
COM
BAT
MDB
XLS
DOC
LNK
PPS
PPT
JPG
MPEG
INI
DAT
ZIP
TXT
Finally the worm will change the name of the infected computer to "ZaCker".
What you need to do is use one of the free online scanners to remove the virus....
also use a worm/trojan scanner.
goto:
Trend Micro House Call Free Virus Scanner"
Swat-it Trojan/Worm Scanner
hope this helps....
Tank863
Tank863
