Virus informations - P2P-Worm.Win32.VB.dg

Les dernières alertes aux Virus

Alias

P2P-Worm.Win32.VB.dg (Kaspersky Lab)

est également connu sous le nom de:

W32/Generic.worm!p2p (McAfee)

Genre: Ver P2P (réseaux de partage)

Status:

Détails techniques

Ce Ver est écrit en Visual Basic et à une taille de 266.240 bytes. Dans le fichier, sont inclus deux autres exécutables. Le premier est MSWINSCK.ocx, qui est le module de contrôle de Winsock utilisée dans des applications VB. La taille du fichier est de 109,248 bytes. Le deuxième fichier exécutable est également écrit en VB. Il fonctionne comme webserver pour le Ver, et à une taille de 32.768 bytes.

Installation

Le Ver arrive par l'intermédiaire des réseaux de partage P2P ou comme lien vers lui-même par l'intermédiaire du réseau MSN messaging network.

Une fois exécuté le Ver crée les fichiers suivants:


list.ini - créé dans le répertoire "système", ce fichier contient des données pour 
sa routine de propagation.



MSWINSCK.ocx - créé également dans le répertoire "système". Ce fichier est le module 
de contrôle de Winsock utilisée dans des programmes Visual Basic. Il fait ceci pour assurer 
que le Ver et ses composants peuvent ainsi fonctionner correctement. Ce fichier n'est 
pas malveillant.



kernel32.exe - créé dans le répertoire "systéme". Il agit en tant que webserver.
killILLUMINATI.exe - une copie du ver qui est créé dans le répertoire "système".
msn_addons.exe - une autre copie du Ver, ce fichier est créée dans C:\
Message.txt - ce fichier contient un message, il est créé également dans C:\

Le Ver ajoute une clef de registre pour assurer qu'il sera exécuté au démarrage de Windows.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Windows32="C:\%sysdir%\killILLUMINATI.exe"

Quand il est exécuté pour la première fois, il affiche un faux message d'erreur.

P2P-Worm.Win32.VB.dg - dernières alertes

Propagation

Ce Ver essaye de se propager par l'intermédiaire du MSN Messenger et les réseaux de partage P2P.

Propagation par P2P:

Le Ver recherche si les répertoires suivants existent:

C:\Program Files\Shareaza\Downloads
C:\Program Files\Morpheus\My Shared Folder
C:\My Shared Folder
C:\Program Files\XoloX\Downloads
C:\Program Files\Tesla\Files
C:\Program Files\Gnucleus\Downloads
C:\Program Files\ICQ\shared files
C:\My Downloads
C:\Program Files\\Edonkey2000\incoming
C:\Program Files\overnet\incoming
C:\Program Files\limewire\shared
C:\Program Files\winmx\shared
C:\Program Files\Warez P2P Client\My Shared Folder
C:\My Shared Folder
C:\Program Files\Files\Kazaa Lite\My Shared Folder
C:\Program Files\\bearshare\shared
C:\Program Files\Edonkey2000\\incoming
C:\program files\\kazaa\my shared folder

S'il trouve un quelconque des répertoires ci-dessus, il se copiera sous tous les noms des fichiers suivants:

Halo PC NO CD Crack (Scanned With Norton AV 2005).exe
UT 2003 NO CD Crack (Scanned With Norton AV 2005).exe
UT 2004 NO CD Crack (Scanned With Norton AV 2005).exe
DOOM 3 NO CD Crack (Scanned With Norton AV 2005).exe
Far Cry NO CD Crack (Scanned With Norton AV 2005).exe
Deus Ex 2 NO CD Crack (Scanned With Norton AV 2005).exe
Call Of Duty NO CD Crack (Scanned With Norton AV 2005).exe
Half Life 2 NO CD Crack (Scanned With Norton AV 2005).exe
Need For Speed Underground NO CD Crack (Scanned With Norton AV 2005).exe
Need For Speed Underground 2 NO CD Crack (Scanned With Norton AV 2005).exe
Max Payne 2 NO CD Crack (Scanned With Norton AV 2005).exe
Red Alert 2 NO CD Crack (Scanned With Norton AV 2005).exe
Tony Hawk Underground NO CD Crack (Scanned With Norton AV 2005).exe
Tony Hawk Underground 2 NO CD Crack (Scanned With Norton AV 2005).exe
The Sims 2 NO CD Crack (Scanned With Norton AV 2005).exe
Quake 3 NO CD Crack (Scanned With Norton AV 2005).exe
Enter The Matrix NO CD Crack (Scanned With Norton AV 2005).exe
Fifa 2005 NO CD Crack (Scanned With Norton AV 2005).exe
C&C Renegade NO CD Crack (Scanned With Norton AV 2005).exe
FiC&C Generals NO CD Crack (Scanned With Norton AV 2005).exe
Man Hunt NO CD Crack (Scanned With Norton AV 2005).exe
Halo CE NO CD Crack (Scanned With Norton AV 2005).exe
GTA Vice City NO CD Crack (Scanned With Norton AV 2005).exe
GTA 3 NO CD Crack (Scanned With Norton AV 2005).exe
GTA San Andreas NO CD Crack (Scanned With Norton AV 2005).exe
Age Of Mythology NO CD Crack (Scanned With Norton AV 2005).exe
Age Of Mythology The Titans NO CD Crack (Scanned With Norton AV 2005).exe
Age Of Empires 2 NO CD Crack (Scanned With Norton AV 2005).exe
Empire Earth NO CD Crack (Scanned With Norton AV 2005).exe
True Crime Streets Of LA NO CD Crack (Scanned With Norton AV 2005).exe
Hitman 2 NO CD Crack (Scanned With Norton AV 2005).exe
Hitman 3 NO CD Crack (Scanned With Norton AV 2005).exe
Splinter Cell NO CD Crack (Scanned With Norton AV 2005).exe
Splinter Cell PT NO CD Crack (Scanned With Norton AV 2005).exe
Rome Total War NO CD Crack (Scanned With Norton AV 2005).exe
Star Wars Battle Front NO CD Crack (Scanned With Norton AV 2005).exe
Men Of Valor Vietnam NO CD Crack (Scanned With Norton AV 2005).exe
Battle Field 1942 NO CD Crack (Scanned With Norton AV 2005).exe
Call Of Duty 2 NO CD Crack (Scanned With Norton AV 2005).exe
Civilization 3 NO CD Crack (Scanned With Norton AV 2005).exe
Colin McRae Rally 4 NO CD Crack (Scanned With Norton AV 2005).exe
Colin McRae Rally 2005 NO CD Crack (Scanned With Norton AV 2005).exe
Half Life NO CD Crack (Scanned With Norton AV 2005).exe
Elder Scrolls 3 Morrowind NO CD Crack (Scanned With Norton AV 2005).exe
Lord Of The Rings ROTK NO CD Crack (Scanned With Norton AV 2005).exe
Medal Of Honor Allied Assault NO CD Crack (Scanned With Norton AV 2005).exe
Mech Warrior 4 NO CD Crack (Scanned With Norton AV 2005).exe
NBA Live 2004 NO CD Crack (Scanned With Norton AV 2005).exe
NBA Live 2005 NO CD Crack (Scanned With Norton AV 2005).exe
Never Winter Nights NO CD Crack (Scanned With Norton AV 2005).exe
Never Winter Nights 2 NO CD Crack (Scanned With Norton AV 2005).exe
NHL 2004 NO CD Crack (Scanned With Norton AV 2005).exe
NHL 2005 NO CD Crack (Scanned With Norton AV 2005).exe
Postal 2 NO CD Crack (Scanned With Norton AV 2005).exe
Red Faction NO CD Crack (Scanned With Norton AV 2005).exe
Red Faction 2 NO CD Crack (Scanned With Norton AV 2005).exe
Simpsons Hit And Run NO CD Crack (Scanned With Norton AV 2005).exe
Soldier Of Fortune 2 NO CD Crack (Scanned With Norton AV 2005).exe
Star Wars KOTOR NO CD Crack (Scanned With Norton AV 2005).exe
Tom Clancy's Ghost Recon NO CD Crack (Scanned With Norton AV 2005).exe
Tom Clancy's Rainbow Six NO CD Crack (Scanned With Norton AV 2005).exe
Tron 2.0 NO CD Crack (Scanned With Norton AV 2005).exe
Unreal 2 NO CD Crack (Scanned With Norton AV 2005).exe
Yu Gi Of Power Of Chaos NO CD Crack (Scanned With Norton AV 2005).exe
Halo PC Keygen (Scanned With Norton AV 2005).exe
UT 2003 Keygen (Scanned With Norton AV 2005).exe
UT 2004 Keygen Crack (Scanned With Norton AV 2005).exe
DOOM 3 Keygen (Scanned With Norton AV 2005).exe
Far Cry Keygen (Scanned With Norton AV 2005).exe
Deus Ex 2 Keygen (Scanned With Norton AV 2005).exe
Call Of Duty Keygen (Scanned With Norton AV 2005).exe
Half Life 2 Keygen (Scanned With Norton AV 2005).exe
Need For Speed Underground Keygen (Scanned With Norton AV 2005).exe
Need For Speed Underground 2 Keygen (Scanned With Norton AV 2005).exe
Max Payne 2 Keygen(Scanned With Norton AV 2005).exe
Red Alert 2 Keygen (Scanned With Norton AV 2005).exe
Tony Hawk Underground Keygen (Scanned With Norton AV 2005).exe
Tony Hawk Underground 2 Keygen (Scanned With Norton AV 2005).exe
The Sims 2 Keygen (Scanned With Norton AV 2005).exe
Quake 3 Keygen (Scanned With Norton AV 2005).exe
Enter The Matrix Keygen (Scanned With Norton AV 2005).exe
Fifa 2005 Keygen (Scanned With Norton AV 2005).exe
C&C Renegade Keygen (Scanned With Norton AV 2005).exe
C&C Generals Keygen (Scanned With Norton AV 2005).exe
Man Hunt Keygen (Scanned With Norton AV 2005).exe
Halo CE Keygen (Scanned With Norton AV 2005).exe
GTA Vice City Keygen (Scanned With Norton AV 2005).exe
GTA 3 Keygen (Scanned With Norton AV 2005).exe
GTA San Andreas Keygen (Scanned With Norton AV 2005).exe
Age Of Mythology Keygen (Scanned With Norton AV 2005).exe
Age Of Mythology The Titans Keygen (Scanned With Norton AV 2005).exe
Age Of Empires 2 Keygen(Scanned With Norton AV 2005).exe
Empire Earth Keygen (Scanned With Norton AV 2005).exe
True Crime Streets Of LA Keygen (Scanned With Norton AV 2005).exe
Hitman 2 Keygen (Scanned With Norton AV 2005).exe
Hitman 3 Keygen (Scanned With Norton AV 2005).exe
Splinter Cell Keygen (Scanned With Norton AV 2005).exe
Splinter Cell PT Keygen (Scanned With Norton AV 2005).exe
Rome Total War Keygen (Scanned With Norton AV 2005).exe
Star Wars Battle Front Keygen (Scanned With Norton AV 2005).exe
Men Of Valor Vietnam Keygen (Scanned With Norton AV 2005).exe
Battle Field 1942 Keygen (Scanned With Norton AV 2005).exe
Call Of Duty 2 Keygen (Scanned With Norton AV 2005).exe
Civilization 3 Keygen (Scanned With Norton AV 2005).exe
Colin McRae Rally 4 Keygen (Scanned With Norton AV 2005).exe
Colin McRae Rally 2005 Keygen (Scanned With Norton AV 2005).exe
Half Life Keygen (Scanned With Norton AV 2005).exe
Elder Scrolls 3 Morrowind Keygen (Scanned With Norton AV 2005).exe
Lord Of The Rings ROTK Keygen (Scanned With Norton AV 2005).exe
Medal Of Honor Allied Assault Keygen (Scanned With Norton AV 2005).exe
Mech Warrior 4 Keygen (Scanned With Norton AV 2005).exe
NBA Live 2004 Keygen(Scanned With Norton AV 2005).exe
NBA Live 2005 Keygen (Scanned With Norton AV 2005).exe
Never Winter Nights Keygen(Scanned With Norton AV 2005).exe
Never Winter Nights 2 Keygen(Scanned With Norton AV 2005).exe
NHL 2004 Keygen (Scanned With Norton AV 2005).exe
NHL 2005 Keygen (Scanned With Norton AV 2005).exe
Postal 2 Keygen (Scanned With Norton AV 2005).exe
Red Faction Keygen (Scanned With Norton AV 2005).exe
Red Faction 2 Keygen (Scanned With Norton AV 2005).exe
Simpsons Hit And Run Keygen (Scanned With Norton AV 2005).exe
Soldier Of Fortune 2 Keygen (Scanned With Norton AV 2005).exe
Star Wars KOTOR Keygen (Scanned With Norton AV 2005).exe
Tom Clancy's Ghost Recon Keygen (Scanned With Norton AV 2005).exe
Tom Clancy's Rainbow Six Keygen (Scanned With Norton AV 2005).exe
Tron 2.0 Keygen (Scanned With Norton AV 2005).exe
Unreal 2 Keygen (Scanned With Norton AV 2005).exe
Yu Gi Of Power Of Chaos Keygen (Scanned With Norton AV 2005).exe
McAfee Keygen (Scanned With Norton AV 2005).exe
PC Cillin Keygen (Scanned With Norton AV 2005).exe
Kaspersky Keyfile Generator (Scanned With Norton AV 2005).exe
Sophos AntiVirus Keygen (Scanned With Norton AV 2005).exe
AVG Keygen ALL VERSIONS (Scanned With Norton AV 2005).exe
Panda AV 2005 Keygen (Scanned With Norton AV 2005).exe
F-Secure Keyfile Generator (Scanned With Norton AV 2005).exe
Avast AntiVirus Keygen (Scanned With Norton AV 2005).exe
F-Prot AntiVirus Keygen (Scanned With Norton AV 2005).exe
VET AntiVirus Keygen (Scanned With Norton AV 2005).exe
BIT Defender AntiVirus Keygen (Scanned With Norton AV 2005).exe
Norton AntiVirus 2005 Keygen.exe
Norton Internet Security 2005 Keygen.exe
Windows Xp Professional Keygen (Scanned With Norton AV 2005).exe
Windows Xp Home Keygen (Scanned With Norton AV 2005).exe
Flash FXP Keygen (Scanned With Norton AV 2005).exe
Tune Up 2004 Keygen (Scanned With Norton AV 2005).exe
Visual Basic 6 Keygen (Scanned With Norton AV 2005).exe
Visual C++ Keygen (Scanned With Norton AV 2005).exe
Office 2000 Keygen (Scanned With Norton AV 2005).exe
Office 2002 Keygen (Scanned With Norton AV 2005).exe
Office Xp Keygen (Scanned With Norton AV 2005).exe
Office 2003 Keygen (Scanned With Norton AV 2005).exe
Partition Magic 8 Keygen (Scanned With Norton AV 2005).exe
WinRAR Keygen (Scanned With Norton AV 2005).exe
Microsoft Longhorn 4051 Keygen (Scanned With Norton AV 2005).exe
Microsoft Longhorn 4071 Keygen (Scanned With Norton AV 2005).exe
Nero 6 Keygen (Scanned With Norton AV 2005).exe
Nero 7 Keygen (Scanned With Norton AV 2005).exe
Alcohol 120 % Keygen (Scanned With Norton AV 2005).exe
Macromedia Dreamweaver MX Keygen (Scanned With Norton AV 2005).exe
Bryce 5 Keygen (Scanned With Norton AV 2005).exe
Black ICE PC Protect Keygen (Scanned With Norton AV 2005).exe
Zone Alarm Pro 4.x Crack (Scanned With Norton AV 2005).exe
Zone Alarm Pro 5.x Crack (Scanned With Norton AV 2005).exe
Xenon Ultra - Xbox Emulator.exe
Game4 Ultra - Gamecube Emulator.exe
Bleem Next Gen - PS2 Emulator.exe
Doom 3 - RELOADED ISO FTP Info.exe
Half Life 2 - EMPORiO ISO FTP Info.exe
Need For Speed Underground 2 - RELOADED ISO FTP Info.exe
Quake 4 BETA 5.72 - RELOADED ISO FTP Info.exe
True Crimes Streets Of LA - RELOADED ISO FTP Info.exe
Unreal 3 BETA 2.654 - RELOADED ISO FTP Info.exe
Xbox Boot Disc ISO DVD.exe
Playstation 2 Boot Disc ISO DVD.exe
Gamecube Boot Disc ISO DVD.exe
Halo 2 [XBOX] - ISO FTP Info.exe
Fable [XBOX] - ISO FTP Info.exe
Perfect Dark Zero [XBOX] - ISO FTP Info.exe
Conker Live & Reloaded [XBOX] - ISO FTP Info.exe
Men Of Valor:Vietnam [XBOX] - ISO FTP Info.exe
Doom 3 [XBOX] - ISO FTP Info.exe
Splinter Cell PT [XBOX] - ISO FTP Info.exe
Splinter Cell Chaos Theory [XBOX] - ISO FTP Info.exe
Project Gotham 2 [XBOX] - ISO FTP Info.exe
Half Life 2 [XBOX] - ISO FTP Info.exe
Blinx 2 [XBOX] - ISO FTP Info.exe
Mortal Combat Deception [XBOX] - ISO FTP Info.exe
Tom Clancy's Ghost Recon 2 [XBOX] - ISO FTP Info.exe
Call Of Duty [XBOX] - ISO FTP Info.exe
Jade Empire [XBOX] - ISO FTP Info.exe
Oddworld Munch's Oddysee [XBOX] - ISO FTP Info.exe
Oddworld Strangers Wrath [XBOX] - ISO FTP Info.exe
Need For Speed Underground 2 [XBOX] - ISO FTP Info.exe
Mech Assault 2 [XBOX] - ISO FTP Info.exe
Ninja Gaiden [XBOX] - ISO FTP Info.exe
Tony Hawk Underground 2 [XBOX] - ISO FTP Info.exe
Sonic Mega Collection [XBOX] - ISO FTP Info.exe
Dead Or Alive Ultimate [XBOX] - ISO FTP Info.exe
Soul Calibur 2 [XBOX] - ISO FTP Info.exe
Spiderman 2 [XBOX] - ISO FTP Info.exe
Star Wars Battlefront [XBOX] - ISO FTP Info.exe
Star Wars KOTOR [XBOX] - ISO FTP Info.exe
Star Wars KOTOR 2 [XBOX] - ISO FTP Info.exe
Amped [XBOX] - ISO FTP Info.exe
Brute Force [XBOX] - ISO FTP Info.exe
Amped 2 [XBOX] - ISO FTP Info.exe
Buffy The Vampire Slayer [XBOX] - ISO FTP Info.exe
Buffy : Chaos Bleeds [XBOX] - ISO FTP Info.exe
Juiced [XBOX] - ISO FTP Info.exe
Colin Mcrae 2005 [XBOX] - ISO FTP Info.exe
Crash Bandicoot TWOC [XBOX] - ISO FTP Info.exe
Crazy Taxi 3 [XBOX] - ISO FTP Info.exe
Deus Ex 2:Invisible War [XBOX] - ISO FTP Info.exe
DRIV3R (Driver 3) [XBOX] - ISO FTP Info.exe
GTA San Andreas [XBOX] - ISO FTP Info.exe
GTA Double Pack [XBOX] - ISO FTP Info.exe
Enter The Matrix [XBOX] - ISO FTP Info.exe
Grabbed By The Ghoulies [XBOX] - ISO FTP Info.exe
Halo [XBOX] - ISO FTP Info.exe
Hitman Contracts [XBOX] - ISO FTP Info.exe
Hunter The Reckoning:The Redeemer [XBOX] - ISO FTP Info.exe
Hitman 2:Silent Assasin [XBOX] - ISO FTP Info.exe
Jet Set Radio Future [XBOX] - ISO FTP Info.exe
Jade Empire [XBOX] - ISO FTP Info.exe
Kung Fu Chaos [XBOX] - ISO FTP Info.exe
Lord Of The Rings ROTK [XBOX] - ISO FTP Info.exe
Lord Of The Rings TTA [XBOX] - ISO FTP Info.exe
Lord Of The Rings FOTH [XBOX] - ISO FTP Info.exe
Medal Of Honour:Dogs Of War [XBOX] - ISO FTP Info.exe
Medal Of Honour:Rising Sun [XBOX] - ISO FTP Info.exe
Medal Of Honour:Frontline [XBOX] - ISO FTP Info.exe
Morrowind:GOTY [XBOX] - ISO FTP Info.exe
Red Faction 2 [XBOX] - ISO FTP Info.exe
Rallysport Challenge 2 [XBOX] - ISO FTP Info.exe
The Simpsons Hit And Run [XBOX] - ISO FTP Info.exe
The Sims:Bustin' Out [XBOX] - ISO FTP Info.exe
Timesplitters 2 [XBOX] - ISO FTP Info.exe
True Crimes:Streets Of LA [XBOX] - ISO FTP Info.exe
Unreal Championship [XBOX] - ISO FTP Info.exe
Unreal Championship 2:Liandari Conflict [XBOX] - ISO FTP Info.exe
GTA San Andreas [PS2] - ISO FTP Info.exe
GTA 3 [PS2] - ISO FTP Info.exe
GTA Vice City [PS2] - ISO FTP Info.exe
Final Fantasy X [PS2] - ISO FTP Info.exe
Final Fantasy 10 [PS2] - ISO FTP Info.exe
Kill Zone [PS2] - ISO FTP Info.exe
Need For Speed Underground [PS2] - ISO FTP Info.exe
Need For Speed Underground 2 [PS2] - ISO FTP Info.exe
Prince Of Persia:Warrior Within [PS2] - ISO FTP Info.exe
Socom [PS2] - ISO FTP Info.exe
Golden Eye Rogue Agent [PS2] - ISO FTP Info.exe
Tom Clancy's Ghost Recon 2 [PS2] - ISO FTP Info.exe
Gran Turismo 4 [PS2] - ISO FTP Info.exe
Star Wars Galaxies [PS2] - ISO FTP Info.exe
Black And White:Next Generation [PS2] - ISO FTP Info.exe
Call Of Duty:Finest Hour [PS2] - ISO FTP Info.exe
Dragon Ball Z: Budokai 3 [PS2] - ISO FTP Info.exe
Ape Escape: Pumped & Primed [PS2] - ISO FTP Info.exe
Lord Of The Rings:The Third Age [PS2] - ISO FTP Info.exe
Metal Gear Solid 3 [PS2] - ISO FTP Info.exe
Silent Hill 4:The Room [PS2] - ISO FTP Info.exe
Tony Hawk Underground 2 [PS2] - ISO FTP Info.exe
Tony Hawk Underground 2 [GCN] - ISO FTP Info.exe
Need For Speed Underground 2 [GCN] - ISO FTP Info.exe
Paper Mario [GCN] - ISO FTP Info.exe
Super Mario Sunshine [GCN] - ISO FTP Info.exe
Luigi's Manshion [GCN] - ISO FTP Info.exe
Mario Kart Double Dash [GCN] - ISO FTP Info.exe
Mario Party 4 [GCN] - ISO FTP Info.exe
Mario Party 5 [GCN] - ISO FTP Info.exe
Metroid Prime [GCN] - ISO FTP Info.exe
Metroid 2 [GCN] - ISO FTP Info.exe
Pikmin [GCN] - ISO FTP Info.exe
Star Fox Adventures [GCN] - ISO FTP Info.exe
Lord Of The Rings:ROTK [GCN] - ISO FTP Info.exe
Lord Of The Rings:LOTR [GCN] - ISO FTP Info.exe
Mario Power Tennis [GCN] - ISO FTP Info.exe
Super Smash Bro's Melee [GCN] - ISO FTP Info.exe
Donkey Kong Country 2 [GCN] - ISO FTP Info.exe
Lord Of The Rings:The Third Age [GCN] - ISO FTP Info.exe
Golden Eye:Rogue Agent [GCN] - ISO FTP Info.exe
Viewtiful Joe [GCN] - ISO FTP Info.exe
The Urbz:Sims In The City [GCN] - ISO FTP Info.exe
The Sims:Bustin'Out [GCN] - ISO FTP Info.exe
Spyro A Heros Tale [GCN] - ISO FTP Info.exe
Shrek 2:Beg For Mercy [GCN] - ISO FTP Info.exe
Resident Evil 4 [GCN] - ISO FTP Info.exe
Call Of Duty:Finest Hour [GCN] - ISO FTP Info.exe
Yu-Gi-Oh! [GCN] - ISO FTP Info.exe
Sonic Adventure DX [GCN] - ISO FTP Info.exe
Sonic Adventure DX 2 [GCN] - ISO FTP Info.exe
Sonic Mega Collection [GCN] - ISO FTP Info.exe
1080 Avalanche [GCN] - ISO FTP Info.exe
F-Zero Racing [GCN] - ISO FTP Info.exe
Area 51 [GCN] - ISO FTP Info.exe
Batman:Vengence [GCN] - ISO FTP Info.exe
Batman:Bad Tommorow [GCN] - ISO FTP Info.exe
Capcom vs SNK 2 EO [GCN] - ISO FTP Info.exe
Dragon Ball Z Budokai 2 [GCN] - ISO FTP Info.exe
Final Fantasy Crystal Cronicles [GCN] - ISO FTP Info.exe
Legend Of Zelda For Swords [GCN] - ISO FTP Info.exe
Medal Of Honour Frontline [GCN] - ISO FTP Info.exe
NBA Live 2005 [GCN] - ISO FTP Info.exe
Simpsons Hit And Run [GCN] - ISO FTP Info.exe
Prince Of Persia:Warrior Within [GCN] - ISO FTP Info.exe
Zoocube [GCN] - ISO FTP Info.exe
Spiderman 2 [GCN] - ISO FTP Info.exe
Ape Escape 3 [PS2] - ISO FTP Info.exe
Backyard Wrestling 2 [PS2] - ISO FTP Info.exe
Black And White Next Gen [PS2] - ISO FTP Info.exe
Capcom vs SNK 2 [PS2] - ISO FTP Info.exe
Devil May Cry [PS2] - ISO FTP Info.exe
Devil May Cry 2 [PS2] - ISO FTP Info.exe
Dragon Ball Z Budokai 3 [PS2] - ISO FTP Info.exe
Hitman 3:Contracts [PS2] - ISO FTP Info.exe
King Of Fighters 2003 [PS2] - ISO FTP Info.exe
Midnight Club 3 [PS2] - ISO FTP Info.exe
Mortal Combat:Deception [PS2] - ISO FTP Info.exe
TimeSplitters 2 [PS2] - ISO FTP Info.exe
Moto GP3 [PS2] - ISO FTP Info.exe
Metal Gear Solid 3:Snake Eater [PS2] - ISO FTP Info.exe
Breath Of Fire Dragon Quest [PS2] - ISO FTP Info.exe
Half Life 2 Keygen - RELOADED.exe
Doom 3 Keygen - RELOADED.exe
UT 2004 Keygen - RELOADED.exe
UT 2003 Keygen - RELOADED.exe
Halo PC Keygen - RELOADED.exe
Halo CE Keygen - RELOADED.exe
Age Of Mythology Keygen - RELOADED.exe
Red Alert 2 Keygen - RELOADED.exe
C&C Generals Keygen - RELOADED.exe
Counter Strike:Source Keygen - RELOADED.exe
Need For Speed Underground 2 Keygen - RELOADED.exe
Call Of Duty Keygen - RELOADED.exe
Sacred Keygen - RELOADED.exe
War Craft 3 Keygen - RELOADED.exe
Medal Of Honour Allied Assault Keygen - RELOADED.exe
Battle Field 1942 Keygen - RELOADED.exe
Colin Mcrae 2005 Keygen - RELOADED.exe
Half Life 2 STEAM Keygen - RELOADED.exe
Far Cry Keygen - RELOADED.exe
Ghost Recon 2 Keygen - RELOADED.exe
Never Winter Nights 2 Keygen - RELOADED.exe
Diablo 2 Keygen - RELOADED.exe
Black And White Keygen - RELOADED.exe
Black And White Next Generation Keygen - RELOADED.exe
Quake 3 Keygen - RELOADED.exe
Battle Field Vietnam Keygen - RELOADED.exe
War Craft 3 Keygen - RELOADED.exe
Unreal 2 Keygen - RELOADED.exe
Rainbow Six 3 Keygen - RELOADED.exe
Call Of Duty 2 Keygen - RELOADED.exe
McAfee Anti-Virus - Software Keygen.exe
McAfee Firewall - Software Keygen.exe
McAfee Computer Security - Software Keygen.exe
Norton Anti-Virus - Software Keygen.exe
Norton Firewall Keygen - Software Keygen.exe
Norton Internet Security - Software Keygen.exe
Partition Magic 8 - Software Keygen.exe
Panda Titanium 4 - Software Keygen.exe
Windows XP - Software Keygen.exe
RAM Defrag 2.55 - Software Keygen.exe
Porn Cleanser - Software Keygen.exe
Powerpoint 2 DVD - Software Keygen.exe
Norton System Mechanic - Software Keygen.exe
Stopzilla 3.2 - Software Keygen.exe
Nero ALL Versions - Software Keygen.exe
NOD32 - Software Keygen.exe
Pocket DVD Studio - Software Keygen.exe
Get Right 5.1 - Software Keygen.exe
Ad-Aware Pro - Software Keygen.exe
JPEG Compresser 4.2 - Software Keygen.exe
Clone CD 5 - Software Keygen.exe
Cloney XXL - Software Keygen.exe
Panda Titanium AV 2005 - Software Keygen.exe
Flash FXP All Versions - Software Keygen.exe
Smart FTP 1.0 - Software Keygen.exe
Bullet Proof FTP ALL VERSIONS - Software Keygen.exe
Tune Up Utility 2004 - Software Keygen.exe
Registry Toolkit - Software Keygen.exe
Winrar 3.x - Software Keygen.exe
WinZIP ALL VERSIONS - Software Keygen.exe
Keyhole - Software Keygen.exe
Visual C# .NET - Software Keygen.exe
Visual Basic 6 - Software Keygen.exe
Delphi 7 - Software Keygen.exe
Visual C++ ALL VERSIONS - Software Keygen.exe
Hotmail Hacker Pro.exe
Hotmail Hacker Pro SE.exe
Yahoo Hacker Pro.exe
Yahoo Hacker Pro SE.exe
NetBIOS Hacker.exe
NetBIOS Auto Rooter.exe
Direct IP Hacker.exe
Exploit Compiler SE.exe
Sub 7 Special Edition (NO SERVER NEEDED).exe
Hackers Paradise.exe
Hackers Office.exe
Hacker Tools.exe
IP Hacker.exe
Port Scanner.exe
Super Fast IP Scanner.exe
Virus Generator.exe
Worm Generator.exe
Email Hacking Tool.exe
Linux (Hacking Tool).exe
Hacking Tool.exe
RPC DCOM Hacking Tool.exe
LSASS Hacking Tool.exe
Network Hacking Tool.exe
IP Nuker.exe
IP Flooder.exe
ICMP Flooder.exe
UDP Flooder.exe
TCP Flooder.exe
SYN Flooder.exe
Yahoo Booter.exe
Booter (Hack Tool).exe
MSN Chat Booter.exe
Chat Room Booter(Works).exe
Trojan Kit.exe
CIA Hacker Tool.exe
FBI Hacker Tool.exe
Hackers Black Book.exe
Hacking Exposed 5th Edition.exe
Hacking Exposed 4th Edition.exe
Hacking eBooks.exe
Master Hacker Tool.exe
Windows XP Hacker.exe
Website Defacer (Hack Tool).exe

Ces noms sont extraits à partir du fichier list.ini.

Propagation via MSN:

Le Ver essaye de se propager par l'intermédiaire du réseau MSN, en tant que lien relié au fichier infecté.

L'ordinateur infecté sert d'hôte à cette action.

D'abord, le Ver entre en contact avec une page spécifique sur www.showmyip.com pour déterminer l'adresse IP de l'ordinateur infecté.

Note: Cette page a été déplacée et donc le Ver ne peut plus analyser le rendement.

Le Ver recherche les contacts qui sont en ligne et leur envoie le message suivant:

"please download this...its only small brb http:/[server]/msn_addons.exe"

[serveur] est pour l'adresse IP déterminée par le Ver.

Car la page a été déplacée, et ceci ressemblera à peu près à cela:

"please download this...its only small brb http:///msn_addons.exe"

Il envoie ce message à plusieurs reprises.

Payload

Le Ver essaye de cacher le processus "killILLUMINATI.exe" de la liste des processus.

Le Ver peut changer la page de démarrage de l'Internet Explorer et la redirigée vers une des pages suivantes:

http://www.pentagonstrike.co.uk/pentagon.swf
www.hugequestions.com/911.swf
http://download.911sb.org/911.swf
http://download.911sb.org/911.swf
http://download.911sb.org/911.swf
http://www.root.co.yu/pentagon/pentagon.swf
http://www.911weknow.com/911.swf
http://www.spycave.com/pentagon.swf
http://www.theundertow.tk/media/videos/_files/Pentagon.swf
http://911sharethetruth.com/extras/pentagon.swf

kernel32.exe ouvre le port TCP/80 et transforme l'ordinateur en webserver, de sorte que le destinataire du Instant Messager puisse télécharger le fichier infecté à partir de cet ordinateur.

kernel32.exe conduit une attaque DoS sur le site jamster.com.

Autre

Le fichier "Message.txt" situés dans C:\ contient le message suivant:

"The easiest way to gain control of the 
population is to carry out acts of terror the 
public will clamor for such laws if the personal 
security is threatened."

- Joseph Stalin

Suppression:

Assurez-vous que votre Antivirus est à jour. Si votre système est infecté, et que vous ne pouvez pas accéder au site de votre fournisseur d'Antivirus, supprimez le fichier "host" situé dans %sysdir%\drivers\etc et essayé de nouveau.

Exécutez un balayage complet du système.

Les utilisateurs de Kaspersky Anti-Virus devraient supprimer tous les fichiers détectés comme étant P2P-Worm.Win32.VB.dg. Rebooter au besoin.

Ver Bagle.AS

JPEG Exploit!

Ver Mydoom.S