|
More Information :
|
|
|
|
W32.Gokar.A
|
|
Alias
|
:
I-Worm.Gokar.A@mm
|
Category
|
:
Worm
|
Type
|
:
File
|
Update Number
|
:
851
|
Description
|
:
This is a mass mailing worm which sends itself to all the addresses listed in the MS-Outlook address book.
|
Details
|
:
This worm arrives as an email with a random subject and body. The attachment is also randomly named but has the extension of BAT, COM, EXE, PIF or SCR. When the attachment is executed the worm copies itself to the windows folder with the name Karen.exe. It then creates a registry entry to automatically execute the worm whenever the system is started. After this the worm sends a copy of itself to all the addresses listed in the Outlook address book.
|
Damage
|
|
Risk Factor
|
|
<< Back
|
|
|
|