P2P-Worm.Win32.VB.dg

Червь написан на языке Visual Basic. Основной исполняемый файл червя имеет размер 266240 байт.

Червь написан на языке Visual Basic. Основной исполняемый файл червя имеет размер 266240 байт.

В основном файле червя находится еще две программы: MSWINSCK.OCX (размер — 109248 байт), модуль управления winsock для VB-приложений; и еще одна программа, также написанная на VB, осуществляющая функции веб-сервера и имеющая размер 32768 байт.

Инсталляция

Червь размножается через файлообменные сети и в виде рассылаемой на интернет-пейджеры сети MSN Messenger ссылки на основной исполняемый файл червя.

После запуска червь создает следующие файлы в системной папке Windows:

* kernel32.exe — работает как веб-сервер;

* killILLUMINATI.exe — копия основного файла червя;

* list.ini — содержит информацию, использующуюся в процессе саморазмножения;

* MSWINSCK.OCX — представляет собой модуль управления winsock для программ, написанных на Visual Basic. Файл нужен для корректной работы червя и не содержит вредоносных функций.

Также червь создает следующие файлы в корневом каталоге диска C:

* Message.txt — файл содержит текстовое сообщение;

* msn_addons.exe — еще одна копия основного файла червя.

Чтобы запускаться при старте операционной системы, червь добавляет ссылку на свой основной файл в ключ автозапуска системного реестра:

 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "Windows32"="C:\%sysdir%\killILLUMINATI.exe"

При первом запуске червь показывает фальшивое сообщение об ошибке.

Размножение через P2P-сети

Червь проверяет наличие следующих папок:

 
 C:\My Downloads
 C:\My Shared Folder
 C:\My Shared Folder
 C:\Program Files\\bearshare\shared
 C:\Program Files\\Edonkey2000\incoming
 C:\program files\\kazaa\my shared folder
 C:\Program Files\Edonkey2000\\incoming
 C:\Program Files\Files\Kazaa Lite\My Shared Folder
 C:\Program Files\Gnucleus\Downloads
 C:\Program Files\ICQ\shared files
 C:\Program Files\limewire\shared
 C:\Program Files\Morpheus\My Shared Folder
 C:\Program Files\overnet\incoming
 C:\Program Files\Shareaza\Downloads
 C:\Program Files\Tesla\Files
 C:\Program Files\Warez P2P Client\My Shared Folder
 C:\Program Files\winmx\shared
 C:\Program Files\XoloX\Downloads

В случае обнаружения подобных папок, червь копирует себя в них под следующими именами:

 1080 Avalanche [GCN] - ISO FTP Info.exe
 Ad-Aware Pro - Software Keygen.exe
 Age Of Empires 2 Keygen(Scanned With Norton AV 2005).exe
 Age Of Empires 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Age Of Mythology Keygen - RELOADED.exe
 Age Of Mythology Keygen (Scanned With Norton AV 2005).exe
 Age Of Mythology NO CD Crack (Scanned With Norton AV 2005).exe
 Age Of Mythology The Titans Keygen (Scanned With Norton AV 2005).exe
 Age Of Mythology The Titans NO CD Crack (Scanned With Norton AV 2005).exe
 Alcohol 120 % Keygen (Scanned With Norton AV 2005).exe
 Amped [XBOX] - ISO FTP Info.exe
 Amped 2 [XBOX] - ISO FTP Info.exe
 Ape Escape 3 [PS2] - ISO FTP Info.exe
 Ape Escape: Pumped & Primed [PS2] - ISO FTP Info.exe
 Area 51 [GCN] - ISO FTP Info.exe
 Avast AntiVirus Keygen (Scanned With Norton AV 2005).exe
 AVG Keygen ALL VERSIONS (Scanned With Norton AV 2005).exe
 Backyard Wrestling 2 [PS2] - ISO FTP Info.exe
 Batman:Bad Tommorow [GCN] - ISO FTP Info.exe
 Batman:Vengence [GCN] - ISO FTP Info.exe
 Battle Field 1942 Keygen - RELOADED.exe
 Battle Field 1942 Keygen (Scanned With Norton AV 2005).exe
 Battle Field 1942 NO CD Crack (Scanned With Norton AV 2005).exe
 Battle Field Vietnam Keygen - RELOADED.exe
 BIT Defender AntiVirus Keygen (Scanned With Norton AV 2005).exe
 Black And White Keygen - RELOADED.exe
 Black And White Next Gen [PS2] - ISO FTP Info.exe
 Black And White Next Generation Keygen - RELOADED.exe
 Black And White:Next Generation [PS2] - ISO FTP Info.exe
 Black ICE PC Protect Keygen (Scanned With Norton AV 2005).exe
 Bleem Next Gen - PS2 Emulator.exe
 Blinx 2 [XBOX] - ISO FTP Info.exe
 Booter (Hack Tool).exe
 Breath Of Fire Dragon Quest [PS2] - ISO FTP Info.exe
 Brute Force [XBOX] - ISO FTP Info.exe
 Bryce 5 Keygen (Scanned With Norton AV 2005).exe
 Buffy : Chaos Bleeds [XBOX] - ISO FTP Info.exe
 Buffy The Vampire Slayer [XBOX] - ISO FTP Info.exe
 Bullet Proof FTP ALL VERSIONS - Software Keygen.exe
 C&C Generals Keygen - RELOADED.exe
 C&C Generals Keygen (Scanned With Norton AV 2005).exe
 C&C Renegade Keygen (Scanned With Norton AV 2005).exe
 C&C Renegade NO CD Crack (Scanned With Norton AV 2005).exe
 Call Of Duty [XBOX] - ISO FTP Info.exe
 Call Of Duty 2 Keygen - RELOADED.exe
 Call Of Duty 2 Keygen (Scanned With Norton AV 2005).exe
 Call Of Duty 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Call Of Duty Keygen - RELOADED.exe
 Call Of Duty Keygen (Scanned With Norton AV 2005).exe
 Call Of Duty NO CD Crack (Scanned With Norton AV 2005).exe
 Call Of Duty:Finest Hour [GCN] - ISO FTP Info.exe
 Call Of Duty:Finest Hour [PS2] - ISO FTP Info.exe
 Capcom vs SNK 2 [PS2] - ISO FTP Info.exe
 Capcom vs SNK 2 EO [GCN] - ISO FTP Info.exe
 Chat Room Booter(Works).exe
 CIA Hacker Tool.exe
 Civilization 3 Keygen (Scanned With Norton AV 2005).exe
 Civilization 3 NO CD Crack (Scanned With Norton AV 2005).exe
 Clone CD 5 - Software Keygen.exe
 Cloney XXL - Software Keygen.exe
 Colin Mcrae 2005 [XBOX] - ISO FTP Info.exe
 Colin Mcrae 2005 Keygen - RELOADED.exe
 Colin McRae Rally 2005 Keygen (Scanned With Norton AV 2005).exe
 Colin McRae Rally 2005 NO CD Crack (Scanned With Norton AV 2005).exe
 Colin McRae Rally 4 Keygen (Scanned With Norton AV 2005).exe
 Colin McRae Rally 4 NO CD Crack (Scanned With Norton AV 2005).exe
 Conker Live & Reloaded [XBOX] - ISO FTP Info.exe
 Counter Strike:Source Keygen - RELOADED.exe
 Crash Bandicoot TWOC [XBOX] - ISO FTP Info.exe
 Crazy Taxi 3 [XBOX] - ISO FTP Info.exe
 Dead Or Alive Ultimate [XBOX] - ISO FTP Info.exe
 Delphi 7 - Software Keygen.exe
 Deus Ex 2 Keygen (Scanned With Norton AV 2005).exe
 Deus Ex 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Deus Ex 2:Invisible War [XBOX] - ISO FTP Info.exe
 Devil May Cry [PS2] - ISO FTP Info.exe
 Devil May Cry 2 [PS2] - ISO FTP Info.exe
 Diablo 2 Keygen - RELOADED.exe
 Direct IP Hacker.exe
 Donkey Kong Country 2 [GCN] - ISO FTP Info.exe
 Doom 3 - RELOADED ISO FTP Info.exe
 Doom 3 [XBOX] - ISO FTP Info.exe
 Doom 3 Keygen - RELOADED.exe
 DOOM 3 Keygen (Scanned With Norton AV 2005).exe
 DOOM 3 NO CD Crack (Scanned With Norton AV 2005).exe
 Dragon Ball Z Budokai 2 [GCN] - ISO FTP Info.exe
 Dragon Ball Z Budokai 3 [PS2] - ISO FTP Info.exe
 Dragon Ball Z: Budokai 3 [PS2] - ISO FTP Info.exe
 DRIV3R (Driver 3) [XBOX] - ISO FTP Info.exe
 Elder Scrolls 3 Morrowind Keygen (Scanned With Norton AV 2005).exe
 Elder Scrolls 3 Morrowind NO CD Crack (Scanned With Norton AV 2005).exe
 Email Hacking Tool.exe
 Empire Earth Keygen (Scanned With Norton AV 2005).exe
 Empire Earth NO CD Crack (Scanned With Norton AV 2005).exe
 Enter The Matrix [XBOX] - ISO FTP Info.exe
 Enter The Matrix Keygen (Scanned With Norton AV 2005).exe
 Enter The Matrix NO CD Crack (Scanned With Norton AV 2005).exe
 Exploit Compiler SE.exe
 Fable [XBOX] - ISO FTP Info.exe
 Far Cry Keygen - RELOADED.exe
 Far Cry Keygen (Scanned With Norton AV 2005).exe
 Far Cry NO CD Crack (Scanned With Norton AV 2005).exe
 FBI Hacker Tool.exe
 FiC&C Generals NO CD Crack (Scanned With Norton AV 2005).exe
 Fifa 2005 Keygen (Scanned With Norton AV 2005).exe
 Fifa 2005 NO CD Crack (Scanned With Norton AV 2005).exe
 Final Fantasy 10 [PS2] - ISO FTP Info.exe
 Final Fantasy Crystal Cronicles [GCN] - ISO FTP Info.exe
 Final Fantasy X [PS2] - ISO FTP Info.exe
 Flash FXP All Versions - Software Keygen.exe
 Flash FXP Keygen (Scanned With Norton AV 2005).exe
 F-Prot AntiVirus Keygen (Scanned With Norton AV 2005).exe
 F-Secure Keyfile Generator (Scanned With Norton AV 2005).exe
 F-Zero Racing [GCN] - ISO FTP Info.exe
 Game4 Ultra - Gamecube Emulator.exe
 Gamecube Boot Disc ISO DVD.exe
 Get Right 5.1 - Software Keygen.exe
 Ghost Recon 2 Keygen - RELOADED.exe
 Golden Eye Rogue Agent [PS2] - ISO FTP Info.exe
 Golden Eye:Rogue Agent [GCN] - ISO FTP Info.exe
 Grabbed By The Ghoulies [XBOX] - ISO FTP Info.exe
 Gran Turismo 4 [PS2] - ISO FTP Info.exe
 GTA 3 [PS2] - ISO FTP Info.exe
 GTA 3 Keygen (Scanned With Norton AV 2005).exe
 GTA 3 NO CD Crack (Scanned With Norton AV 2005).exe
 GTA Double Pack [XBOX] - ISO FTP Info.exe
 GTA San Andreas [PS2] - ISO FTP Info.exe
 GTA San Andreas [XBOX] - ISO FTP Info.exe
 GTA San Andreas Keygen (Scanned With Norton AV 2005).exe
 GTA San Andreas NO CD Crack (Scanned With Norton AV 2005).exe
 GTA Vice City [PS2] - ISO FTP Info.exe
 GTA Vice City Keygen (Scanned With Norton AV 2005).exe
 GTA Vice City NO CD Crack (Scanned With Norton AV 2005).exe
 Hacker Tools.exe
 Hackers Black Book.exe
 Hackers Office.exe
 Hackers Paradise.exe
 Hacking eBooks.exe
 Hacking Exposed 4th Edition.exe
 Hacking Exposed 5th Edition.exe
 Hacking Tool.exe
 Half Life 2 - EMPORiO ISO FTP Info.exe
 Half Life 2 [XBOX] - ISO FTP Info.exe
 Half Life 2 Keygen - RELOADED.exe
 Half Life 2 Keygen (Scanned With Norton AV 2005).exe
 Half Life 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Half Life 2 STEAM Keygen - RELOADED.exe
 Half Life Keygen (Scanned With Norton AV 2005).exe
 Half Life NO CD Crack (Scanned With Norton AV 2005).exe
 Halo [XBOX] - ISO FTP Info.exe
 Halo 2 [XBOX] - ISO FTP Info.exe
 Halo CE Keygen - RELOADED.exe
 Halo CE Keygen (Scanned With Norton AV 2005).exe
 Halo CE NO CD Crack (Scanned With Norton AV 2005).exe
 Halo PC Keygen - RELOADED.exe
 Halo PC Keygen (Scanned With Norton AV 2005).exe
 Halo PC NO CD Crack (Scanned With Norton AV 2005).exe
 Hitman 2 Keygen (Scanned With Norton AV 2005).exe
 Hitman 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Hitman 2:Silent Assasin [XBOX] - ISO FTP Info.exe
 Hitman 3 Keygen (Scanned With Norton AV 2005).exe
 Hitman 3 NO CD Crack (Scanned With Norton AV 2005).exe
 Hitman 3:Contracts [PS2] - ISO FTP Info.exe
 Hitman Contracts [XBOX] - ISO FTP Info.exe
 Hotmail Hacker Pro SE.exe
 Hotmail Hacker Pro.exe
 Hunter The Reckoning:The Redeemer [XBOX] - ISO FTP Info.exe
 ICMP Flooder.exe
 IP Flooder.exe
 IP Hacker.exe
 IP Nuker.exe
 Jade Empire [XBOX] - ISO FTP Info.exe
 Jade Empire [XBOX] - ISO FTP Info.exe
 Jet Set Radio Future [XBOX] - ISO FTP Info.exe
 JPEG Compresser 4.2 - Software Keygen.exe
 Juiced [XBOX] - ISO FTP Info.exe
 Kaspersky Keyfile Generator (Scanned With Norton AV 2005).exe
 Keyhole - Software Keygen.exe
 Kill Zone [PS2] - ISO FTP Info.exe
 King Of Fighters 2003 [PS2] - ISO FTP Info.exe
 Kung Fu Chaos [XBOX] - ISO FTP Info.exe
 Legend Of Zelda For Swords [GCN] - ISO FTP Info.exe
 Linux (Hacking Tool).exe
 Lord Of The Rings FOTH [XBOX] - ISO FTP Info.exe
 Lord Of The Rings ROTK [XBOX] - ISO FTP Info.exe
 Lord Of The Rings ROTK Keygen (Scanned With Norton AV 2005).exe
 Lord Of The Rings ROTK NO CD Crack (Scanned With Norton AV 2005).exe
 Lord Of The Rings TTA [XBOX] - ISO FTP Info.exe
 Lord Of The Rings:LOTR [GCN] - ISO FTP Info.exe
 Lord Of The Rings:ROTK [GCN] - ISO FTP Info.exe
 Lord Of The Rings:The Third Age [GCN] - ISO FTP Info.exe
 Lord Of The Rings:The Third Age [PS2] - ISO FTP Info.exe
 LSASS Hacking Tool.exe
 Luigi's Manshion [GCN] - ISO FTP Info.exe
 Macromedia Dreamweaver MX Keygen (Scanned With Norton AV 2005).exe
 Man Hunt Keygen (Scanned With Norton AV 2005).exe
 Man Hunt NO CD Crack (Scanned With Norton AV 2005).exe
 Mario Kart Double Dash [GCN] - ISO FTP Info.exe
 Mario Party 4 [GCN] - ISO FTP Info.exe
 Mario Party 5 [GCN] - ISO FTP Info.exe
 Mario Power Tennis [GCN] - ISO FTP Info.exe
 Master Hacker Tool.exe
 Max Payne 2 Keygen(Scanned With Norton AV 2005).exe
 Max Payne 2 NO CD Crack (Scanned With Norton AV 2005).exe
 McAfee Anti-Virus - Software Keygen.exe
 McAfee Computer Security - Software Keygen.exe
 McAfee Firewall - Software Keygen.exe
 McAfee Keygen (Scanned With Norton AV 2005).exe
 Mech Assault 2 [XBOX] - ISO FTP Info.exe
 Mech Warrior 4 Keygen (Scanned With Norton AV 2005).exe
 Mech Warrior 4 NO CD Crack (Scanned With Norton AV 2005).exe
 Medal Of Honor Allied Assault Keygen (Scanned With Norton AV 2005).exe
 Medal Of Honor Allied Assault NO CD Crack (Scanned With Norton AV 2005).exe
 Medal Of Honour Allied Assault Keygen - RELOADED.exe
 Medal Of Honour Frontline [GCN] - ISO FTP Info.exe
 Medal Of Honour:Dogs Of War [XBOX] - ISO FTP Info.exe
 Medal Of Honour:Frontline [XBOX] - ISO FTP Info.exe
 Medal Of Honour:Rising Sun [XBOX] - ISO FTP Info.exe
 Men Of Valor Vietnam Keygen (Scanned With Norton AV 2005).exe
 Men Of Valor Vietnam NO CD Crack (Scanned With Norton AV 2005).exe
 Men Of Valor:Vietnam [XBOX] - ISO FTP Info.exe
 Metal Gear Solid 3 [PS2] - ISO FTP Info.exe
 Metal Gear Solid 3:Snake Eater [PS2] - ISO FTP Info.exe
 Metroid 2 [GCN] - ISO FTP Info.exe
 Metroid Prime [GCN] - ISO FTP Info.exe
 Microsoft Longhorn 4051 Keygen (Scanned With Norton AV 2005).exe
 Microsoft Longhorn 4071 Keygen (Scanned With Norton AV 2005).exe
 Midnight Club 3 [PS2] - ISO FTP Info.exe
 Morrowind:GOTY [XBOX] - ISO FTP Info.exe
 Mortal Combat Deception [XBOX] - ISO FTP Info.exe
 Mortal Combat:Deception [PS2] - ISO FTP Info.exe
 Moto GP3 [PS2] - ISO FTP Info.exe
 MSN Chat Booter.exe
 NBA Live 2004 Keygen(Scanned With Norton AV 2005).exe
 NBA Live 2004 NO CD Crack (Scanned With Norton AV 2005).exe
 NBA Live 2005 [GCN] - ISO FTP Info.exe
 NBA Live 2005 Keygen (Scanned With Norton AV 2005).exe
 NBA Live 2005 NO CD Crack (Scanned With Norton AV 2005).exe
 Need For Speed Underground [PS2] - ISO FTP Info.exe
 Need For Speed Underground 2 - RELOADED ISO FTP Info.exe
 Need For Speed Underground 2 [GCN] - ISO FTP Info.exe
 Need For Speed Underground 2 [PS2] - ISO FTP Info.exe
 Need For Speed Underground 2 [XBOX] - ISO FTP Info.exe
 Need For Speed Underground 2 Keygen - RELOADED.exe
 Need For Speed Underground 2 Keygen (Scanned With Norton AV 2005).exe
 Need For Speed Underground 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Need For Speed Underground Keygen (Scanned With Norton AV 2005).exe
 Need For Speed Underground NO CD Crack (Scanned With Norton AV 2005).exe
 Nero 6 Keygen (Scanned With Norton AV 2005).exe
 Nero 7 Keygen (Scanned With Norton AV 2005).exe
 Nero ALL Versions - Software Keygen.exe
 NetBIOS Auto Rooter.exe
 NetBIOS Hacker.exe
 Network Hacking Tool.exe
 Never Winter Nights 2 Keygen - RELOADED.exe
 Never Winter Nights 2 Keygen(Scanned With Norton AV 2005).exe
 Never Winter Nights 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Never Winter Nights Keygen(Scanned With Norton AV 2005).exe
 Never Winter Nights NO CD Crack (Scanned With Norton AV 2005).exe
 NHL 2004 Keygen (Scanned With Norton AV 2005).exe
 NHL 2004 NO CD Crack (Scanned With Norton AV 2005).exe
 NHL 2005 Keygen (Scanned With Norton AV 2005).exe
 NHL 2005 NO CD Crack (Scanned With Norton AV 2005).exe
 Ninja Gaiden [XBOX] - ISO FTP Info.exe
 NOD32 - Software Keygen.exe
 Norton Anti-Virus - Software Keygen.exe
 Norton AntiVirus 2005 Keygen.exe
 Norton Firewall Keygen - Software Keygen.exe
 Norton Internet Security - Software Keygen.exe
 Norton Internet Security 2005 Keygen.exe
 Norton System Mechanic - Software Keygen.exe
 Oddworld Munch's Oddysee [XBOX] - ISO FTP Info.exe
 Oddworld Strangers Wrath [XBOX] - ISO FTP Info.exe
 Office 2000 Keygen (Scanned With Norton AV 2005).exe
 Office 2002 Keygen (Scanned With Norton AV 2005).exe
 Office 2003 Keygen (Scanned With Norton AV 2005).exe
 Office Xp Keygen (Scanned With Norton AV 2005).exe
 Panda AV 2005 Keygen (Scanned With Norton AV 2005).exe
 Panda Titanium 4 - Software Keygen.exe
 Panda Titanium AV 2005 - Software Keygen.exe
 Paper Mario [GCN] - ISO FTP Info.exe
 Partition Magic 8 - Software Keygen.exe
 Partition Magic 8 Keygen (Scanned With Norton AV 2005).exe
 PC Cillin Keygen (Scanned With Norton AV 2005).exe
 Perfect Dark Zero [XBOX] - ISO FTP Info.exe
 Pikmin [GCN] - ISO FTP Info.exe
 Playstation 2 Boot Disc ISO DVD.exe
 Pocket DVD Studio - Software Keygen.exe
 Porn Cleanser - Software Keygen.exe
 Port Scanner.exe
 Postal 2 Keygen (Scanned With Norton AV 2005).exe
 Postal 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Powerpoint 2 DVD - Software Keygen.exe
 Prince Of Persia:Warrior Within [GCN] - ISO FTP Info.exe
 Prince Of Persia:Warrior Within [PS2] - ISO FTP Info.exe
 Project Gotham 2 [XBOX] - ISO FTP Info.exe
 Quake 3 Keygen - RELOADED.exe
 Quake 3 Keygen (Scanned With Norton AV 2005).exe
 Quake 3 NO CD Crack (Scanned With Norton AV 2005).exe
 Quake 4 BETA 5.72 - RELOADED ISO FTP Info.exe
 Rainbow Six 3 Keygen - RELOADED.exe
 Rallysport Challenge 2 [XBOX] - ISO FTP Info.exe
 RAM Defrag 2.55 - Software Keygen.exe
 Red Alert 2 Keygen - RELOADED.exe
 Red Alert 2 Keygen (Scanned With Norton AV 2005).exe
 Red Alert 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Red Faction 2 [XBOX] - ISO FTP Info.exe
 Red Faction 2 Keygen (Scanned With Norton AV 2005).exe
 Red Faction 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Red Faction Keygen (Scanned With Norton AV 2005).exe
 Red Faction NO CD Crack (Scanned With Norton AV 2005).exe
 Registry Toolkit - Software Keygen.exe
 Resident Evil 4 [GCN] - ISO FTP Info.exe
 Rome Total War Keygen (Scanned With Norton AV 2005).exe
 Rome Total War NO CD Crack (Scanned With Norton AV 2005).exe
 RPC DCOM Hacking Tool.exe
 Sacred Keygen - RELOADED.exe
 Shrek 2:Beg For Mercy [GCN] - ISO FTP Info.exe
 Silent Hill 4:The Room [PS2] - ISO FTP Info.exe
 Simpsons Hit And Run [GCN] - ISO FTP Info.exe
 Simpsons Hit And Run Keygen (Scanned With Norton AV 2005).exe
 Simpsons Hit And Run NO CD Crack (Scanned With Norton AV 2005).exe
 Smart FTP 1.0 - Software Keygen.exe
 Socom [PS2] - ISO FTP Info.exe
 Soldier Of Fortune 2 Keygen (Scanned With Norton AV 2005).exe
 Soldier Of Fortune 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Sonic Adventure DX [GCN] - ISO FTP Info.exe
 Sonic Adventure DX 2 [GCN] - ISO FTP Info.exe
 Sonic Mega Collection [GCN] - ISO FTP Info.exe
 Sonic Mega Collection [XBOX] - ISO FTP Info.exe
 Sophos AntiVirus Keygen (Scanned With Norton AV 2005).exe
 Soul Calibur 2 [XBOX] - ISO FTP Info.exe
 Spiderman 2 [GCN] - ISO FTP Info.exe
 Spiderman 2 [XBOX] - ISO FTP Info.exe
 Splinter Cell Chaos Theory [XBOX] - ISO FTP Info.exe
 Splinter Cell Keygen (Scanned With Norton AV 2005).exe
 Splinter Cell NO CD Crack (Scanned With Norton AV 2005).exe
 Splinter Cell PT [XBOX] - ISO FTP Info.exe
 Splinter Cell PT Keygen (Scanned With Norton AV 2005).exe
 Splinter Cell PT NO CD Crack (Scanned With Norton AV 2005).exe
 Spyro A Heros Tale [GCN] - ISO FTP Info.exe
 Star Fox Adventures [GCN] - ISO FTP Info.exe
 Star Wars Battle Front Keygen (Scanned With Norton AV 2005).exe
 Star Wars Battle Front NO CD Crack (Scanned With Norton AV 2005).exe
 Star Wars Battlefront [XBOX] - ISO FTP Info.exe
 Star Wars Galaxies [PS2] - ISO FTP Info.exe
 Star Wars KOTOR [XBOX] - ISO FTP Info.exe
 Star Wars KOTOR 2 [XBOX] - ISO FTP Info.exe
 Star Wars KOTOR Keygen (Scanned With Norton AV 2005).exe
 Star Wars KOTOR NO CD Crack (Scanned With Norton AV 2005).exe
 Stopzilla 3.2 - Software Keygen.exe
 Sub 7 Special Edition (NO SERVER NEEDED).exe
 Super Fast IP Scanner.exe
 Super Mario Sunshine [GCN] - ISO FTP Info.exe
 Super Smash Bro's Melee [GCN] - ISO FTP Info.exe
 SYN Flooder.exe
 TCP Flooder.exe
 The Simpsons Hit And Run [XBOX] - ISO FTP Info.exe
 The Sims 2 Keygen (Scanned With Norton AV 2005).exe
 The Sims 2 NO CD Crack (Scanned With Norton AV 2005).exe
 The Sims:Bustin' Out [XBOX] - ISO FTP Info.exe
 The Sims:Bustin'Out [GCN] - ISO FTP Info.exe
 The Urbz:Sims In The City [GCN] - ISO FTP Info.exe
 TimeSplitters 2 [PS2] - ISO FTP Info.exe
 Timesplitters 2 [XBOX] - ISO FTP Info.exe
 Tom Clancy's Ghost Recon 2 [PS2] - ISO FTP Info.exe
 Tom Clancy's Ghost Recon 2 [XBOX] - ISO FTP Info.exe
 Tom Clancy's Ghost Recon Keygen (Scanned With Norton AV 2005).exe
 Tom Clancy's Ghost Recon NO CD Crack (Scanned With Norton AV 2005).exe
 Tom Clancy's Rainbow Six Keygen (Scanned With Norton AV 2005).exe
 Tom Clancy's Rainbow Six NO CD Crack (Scanned With Norton AV 2005).exe
 Tony Hawk Underground 2 [GCN] - ISO FTP Info.exe
 Tony Hawk Underground 2 [PS2] - ISO FTP Info.exe
 Tony Hawk Underground 2 [XBOX] - ISO FTP Info.exe
 Tony Hawk Underground 2 Keygen (Scanned With Norton AV 2005).exe
 Tony Hawk Underground 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Tony Hawk Underground Keygen (Scanned With Norton AV 2005).exe
 Tony Hawk Underground NO CD Crack (Scanned With Norton AV 2005).exe
 Trojan Kit.exe
 Tron 2.0 Keygen (Scanned With Norton AV 2005).exe
 Tron 2.0 NO CD Crack (Scanned With Norton AV 2005).exe
 True Crime Streets Of LA Keygen (Scanned With Norton AV 2005).exe
 True Crime Streets Of LA NO CD Crack (Scanned With Norton AV 2005).exe
 True Crimes Streets Of LA - RELOADED ISO FTP Info.exe
 True Crimes:Streets Of LA [XBOX] - ISO FTP Info.exe
 Tune Up 2004 Keygen (Scanned With Norton AV 2005).exe
 Tune Up Utility 2004 - Software Keygen.exe
 UDP Flooder.exe
 Unreal 2 Keygen - RELOADED.exe
 Unreal 2 Keygen (Scanned With Norton AV 2005).exe
 Unreal 2 NO CD Crack (Scanned With Norton AV 2005).exe
 Unreal 3 BETA 2.654 - RELOADED ISO FTP Info.exe
 Unreal Championship [XBOX] - ISO FTP Info.exe
 Unreal Championship 2:Liandari Conflict [XBOX] - ISO FTP Info.exe
 UT 2003 Keygen - RELOADED.exe
 UT 2003 Keygen (Scanned With Norton AV 2005).exe
 UT 2003 NO CD Crack (Scanned With Norton AV 2005).exe
 UT 2004 Keygen - RELOADED.exe
 UT 2004 Keygen Crack (Scanned With Norton AV 2005).exe
 UT 2004 NO CD Crack (Scanned With Norton AV 2005).exe
 VET AntiVirus Keygen (Scanned With Norton AV 2005).exe
 Viewtiful Joe [GCN] - ISO FTP Info.exe
 Virus Generator.exe
 Visual Basic 6 - Software Keygen.exe
 Visual Basic 6 Keygen (Scanned With Norton AV 2005).exe
 Visual C# .NET - Software Keygen.exe
 Visual C++ ALL VERSIONS - Software Keygen.exe
 Visual C++ Keygen (Scanned With Norton AV 2005).exe
 War Craft 3 Keygen - RELOADED.exe
 War Craft 3 Keygen - RELOADED.exe
 Website Defacer (Hack Tool).exe
 Windows XP - Software Keygen.exe
 Windows XP Hacker.exe
 Windows Xp Home Keygen (Scanned With Norton AV 2005).exe
 Windows Xp Professional Keygen (Scanned With Norton AV 2005).exe
 Winrar 3.x - Software Keygen.exe
 WinRAR Keygen (Scanned With Norton AV 2005).exe
 WinZIP ALL VERSIONS - Software Keygen.exe
 Worm Generator.exe
 Xbox Boot Disc ISO DVD.exe
 Xenon Ultra - Xbox Emulator.exe
 Yahoo Booter.exe
 Yahoo Hacker Pro SE.exe
 Yahoo Hacker Pro.exe
 Yu Gi Of Power Of Chaos Keygen (Scanned With Norton AV 2005).exe
 Yu Gi Of Power Of Chaos NO CD Crack (Scanned With Norton AV 2005).exe
 Yu-Gi-Oh! [GCN] - ISO FTP Info.exe
 Zone Alarm Pro 4.x Crack (Scanned With Norton AV 2005).exe
 Zone Alarm Pro 5.x Crack (Scanned With Norton AV 2005).exe
 Zoocube [GCN] - ISO FTP Info.exe

Эти названия содержатся в файле list.ini.

Размножение через MSN Messenger

Червь размножается через сеть обмена сообщениями MSN в виде сообщения со ссылкой на основной файл червя. Основной файл находится на ранее зараженном червем компьютере.

Для определния IP-адреса зараженного компьютера червь соединяется со страницей на сайте www.showmyip.com (страница была перемещена, и в настоящее время червь уже не способен произвести этот шаг).

Затем червь ищет находящиеся в режиме онлайн MSN-контакты и отправляет им следующее сообщение:

 
 please download this...its only small brb http:/[server]/msn_addons.exe
 

[server] подменяется IP-адресом зараженного компьютера. Поскольку страница была перемещена, то сейчас подобное сообщение выглядит следующим образом:

 please download this...its only small brb
 http:///msn_addons.exe

Сообщение отсылается несколько раз.

Действие

Червь пытается скрыть процесс killILLUMINATI.exe от программ листинга работающих процессов.

Червь может изменить стартовую страницу Internet Explorer на одну из следующих:

 
 http://911sharethetruth.com/extras/pentagon.swf
 http://download.911sb.org/911.swf
 http://download.911sb.org/911.swf
 http://download.911sb.org/911.swf
 http://www.911weknow.com/911.swf
 http://www.pentagonstrike.co.uk/pentagon.swf
 http://www.root.co.yu/pentagon/pentagon.swf
 http://www.spycave.com/pentagon.swf
 http://www.theundertow.tk/media/videos/_files/Pentagon.swf
 www.hugequestions.com/911.swf

Компонент kernel32.exe открывает порт TCP:80 и превращает компьютер в веб-сервер, что позволяет получателям сообщения MSN Messenger скачивать с зараженного компьютера файл червя.

Также kernel32.exe производит DoS-атаку на сайт jamster.com.

Прочее

В файле Message.txt в корневом каталоге диска C: содержится следующий текст:

 "The easiest way to gain control of the 
 population is to carry out acts of terror the 
 public will clamor for such laws if the personal 
 security is threatened."
 
 - Joseph Stalin

Другие названия

P2P-Worm.Win32.VB.dg («Лаборатория Касперского») также известен как: W32/Generic.worm!p2p (McAfee), WIN.SCRIPT.WORM.Virus (Doctor Web), W32/Kilati.A.worm (Panda)