Vreau sa zic ca mi-am batut capul mai bine de juma’ de ora… cu:


Risk Level 1: Very Low

Discovered: January 18, 2007
Updated: January 19, 2007 8:29:28 AM
Type: Worm
Infection Length: Varies
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows 2000

Once executed, the worm creates the following files:

  • [DRIVE]:\autorun.inf
  • [DRIVE]:\Recycled\desktop.ini
  • [DRIVE]:\Recycled\INFO2
  • [DRIVE]:\Recycled\Recycled\ctfmon.exe
  • %UserProfile%\Start Menu\Programs\Startup\desktop.ini
  • %UserProfile%\Start Menu\Programs\Startup\ctfmon.exe

The worm then spreads by copying itself with the hidden and system attributes set to a fake Recycled folder, which it creates, and to mapped drives.

Disable System Restore (Windows Me/XP).
Update the virus definitions.
Run a full system scan.

Solutia oferita de Symantec. Si totusi solutia a venit de la TrendMicro.