Selected viruses, spyware, and other threats: sorted alphabetically
Win32/Navidad |
Win32/Navidad is an internet worm spreading as an attachment of email messages with the name Navidad.exe. After the file is executed the worm gets installed into the system and ensures its
activation.
Whenever the worm gets executed a dialogue window with heading "Error" and with the text UI appears. The author of the worm made an error when manipulating
the registry – although the worm body is stored in the file winsvrc.vxd the keys in
the registery call a file with the filename winsvrc.exe. Activity of the worm is manifested by presence of a little icon with a blue eye in the
system tray; moreover, no program with the extension EXE can be executed. In the worm body there are texts in Spanish; they are used when the dialogue windows are displayed
if a user has clicked on the "blue eye" icon.
Te estamos mirando..
Lo estamos mirando...
buena eleccion...
Lamentablemente cayo en la tentacion y perdio su computadora
Feliz Navidad
© 1992-2004 Eset s.r.o. All rights reserved. No part of this encyclopedia may be reproduced, transmitted or used in any other way in any other form or by any means without prior permission from Eset.
