this is terrible - wtc virus
Posted: Sat Sep 13, 2003 12:18 am
This worm propagates via email, Internet Relay Chat (IRC), and the KaZaA peer-to-peer file-sharing network. It deletes several files and replaces .EXE files with a copy of itself.
It arrives as an attachment in an email message with following details:
<hr>
Subject: %Email address%. %s% THE WAR HAS STARTED!
Message body:
%Email address%, THE WAR IS NOT A JOKE !... THERE IS ONE
BUILDING UP RIGHT NOW
Let's Unite In This Horrible Kaos. %Email address%... Fight For
Us....!!!
...And Let Us Remember Those Lost Souls ! WE COUNT ON YOU !
%Email address%
Greetings,
World War Veterans.
Attachments:
WTC32.SCR
WTC32.DLL
<hr>
%Email address% is the the email address of the recipient and %s% can be any of the following text strings:
* NOW OUR MISSION: DEATH ?
* THE WORLD WAR THREE IS HERE !
* REMEMBER OUR LOST SOULS !
* WORLD WAR SCENES FROM IRAQ !
* WORLD TRADE CENTER, REVENGE !
Upon execution, this worm displays the following message boxes:
http://www.trendmicro.com/vinfo/virusencyc...ame=WORM_VOTE.K
Archived topic from Iceteks, old topic ID:1322, old post ID:11611
It arrives as an attachment in an email message with following details:
<hr>
Subject: %Email address%. %s% THE WAR HAS STARTED!
Message body:
%Email address%, THE WAR IS NOT A JOKE !... THERE IS ONE
BUILDING UP RIGHT NOW
Let's Unite In This Horrible Kaos. %Email address%... Fight For
Us....!!!
...And Let Us Remember Those Lost Souls ! WE COUNT ON YOU !
%Email address%
Greetings,
World War Veterans.
Attachments:
WTC32.SCR
WTC32.DLL
<hr>
%Email address% is the the email address of the recipient and %s% can be any of the following text strings:
* NOW OUR MISSION: DEATH ?
* THE WORLD WAR THREE IS HERE !
* REMEMBER OUR LOST SOULS !
* WORLD WAR SCENES FROM IRAQ !
* WORLD TRADE CENTER, REVENGE !
Upon execution, this worm displays the following message boxes:
http://www.trendmicro.com/vinfo/virusencyc...ame=WORM_VOTE.K
Archived topic from Iceteks, old topic ID:1322, old post ID:11611