P2P-Worm.Win32.VB.dg

Червь написан на языке Visual Basic. Основной исполняемый файл червя имеет размер 266240 байт.

Червь написан на языке Visual Basic. Основной исполняемый файл червя имеет размер 266240 байт.

В основном файле червя находится еще две программы: MSWINSCK.OCX (размер — 109248 байт), модуль управления winsock для VB-приложений; и еще одна программа, также написанная на VB, осуществляющая функции веб-сервера и имеющая размер 32768 байт.

Инсталляция

Червь размножается через файлообменные сети и в виде рассылаемой на интернет-пейджеры сети MSN Messenger ссылки на основной исполняемый файл червя.

После запуска червь создает следующие файлы в системной папке Windows:

* kernel32.exe — работает как веб-сервер;

* killILLUMINATI.exe — копия основного файла червя;

* list.ini — содержит информацию, использующуюся в процессе саморазмножения;

* MSWINSCK.OCX — представляет собой модуль управления winsock для программ, написанных на Visual Basic. Файл нужен для корректной работы червя и не содержит вредоносных функций.

Также червь создает следующие файлы в корневом каталоге диска C:

* Message.txt — файл содержит текстовое сообщение;

* msn_addons.exe — еще одна копия основного файла червя.

Чтобы запускаться при старте операционной системы, червь добавляет ссылку на свой основной файл в ключ автозапуска системного реестра:


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "Windows32"="C:\%sysdir%\killILLUMINATI.exe"

При первом запуске червь показывает фальшивое сообщение об ошибке.

Размножение через P2P-сети

Червь проверяет наличие следующих папок:


C:\My Downloads
C:\My Shared Folder
C:\My Shared Folder
C:\Program Files\\bearshare\shared
C:\Program Files\\Edonkey2000\incoming
C:\program files\\kazaa\my shared folder
C:\Program Files\Edonkey2000\\incoming
C:\Program Files\Files\Kazaa Lite\My Shared Folder
C:\Program Files\Gnucleus\Downloads
C:\Program Files\ICQ\shared files
C:\Program Files\limewire\shared
C:\Program Files\Morpheus\My Shared Folder
C:\Program Files\overnet\incoming
C:\Program Files\Shareaza\Downloads
C:\Program Files\Tesla\Files
C:\Program Files\Warez P2P Client\My Shared Folder
C:\Program Files\winmx\shared
C:\Program Files\XoloX\Downloads

В случае обнаружения подобных папок, червь копирует себя в них под следующими именами:

1080 Avalanche [GCN] - ISO FTP Info.exe
Ad-Aware Pro - Software Keygen.exe
Age Of Empires 2 Keygen(Scanned With Norton AV 2005).exe
Age Of Empires 2 NO CD Crack (Scanned With Norton AV 2005).exe
Age Of Mythology Keygen - RELOADED.exe
Age Of Mythology Keygen (Scanned With Norton AV 2005).exe
Age Of Mythology NO CD Crack (Scanned With Norton AV 2005).exe
Age Of Mythology The Titans Keygen (Scanned With Norton AV 2005).exe
Age Of Mythology The Titans NO CD Crack (Scanned With Norton AV 2005).exe
Alcohol 120 % Keygen (Scanned With Norton AV 2005).exe
Amped [XBOX] - ISO FTP Info.exe
Amped 2 [XBOX] - ISO FTP Info.exe
Ape Escape 3 [PS2] - ISO FTP Info.exe
Ape Escape: Pumped & Primed [PS2] - ISO FTP Info.exe
Area 51 [GCN] - ISO FTP Info.exe
Avast AntiVirus Keygen (Scanned With Norton AV 2005).exe
AVG Keygen ALL VERSIONS (Scanned With Norton AV 2005).exe
Backyard Wrestling 2 [PS2] - ISO FTP Info.exe
Batman:Bad Tommorow [GCN] - ISO FTP Info.exe
Batman:Vengence [GCN] - ISO FTP Info.exe
Battle Field 1942 Keygen - RELOADED.exe
Battle Field 1942 Keygen (Scanned With Norton AV 2005).exe
Battle Field 1942 NO CD Crack (Scanned With Norton AV 2005).exe
Battle Field Vietnam Keygen - RELOADED.exe
BIT Defender AntiVirus Keygen (Scanned With Norton AV 2005).exe
Black And White Keygen - RELOADED.exe
Black And White Next Gen [PS2] - ISO FTP Info.exe
Black And White Next Generation Keygen - RELOADED.exe
Black And White:Next Generation [PS2] - ISO FTP Info.exe
Black ICE PC Protect Keygen (Scanned With Norton AV 2005).exe
Bleem Next Gen - PS2 Emulator.exe
Blinx 2 [XBOX] - ISO FTP Info.exe
Booter (Hack Tool).exe
Breath Of Fire Dragon Quest [PS2] - ISO FTP Info.exe
Brute Force [XBOX] - ISO FTP Info.exe
Bryce 5 Keygen (Scanned With Norton AV 2005).exe
Buffy : Chaos Bleeds [XBOX] - ISO FTP Info.exe
Buffy The Vampire Slayer [XBOX] - ISO FTP Info.exe
Bullet Proof FTP ALL VERSIONS - Software Keygen.exe
C&C Generals Keygen - RELOADED.exe
C&C Generals Keygen (Scanned With Norton AV 2005).exe
C&C Renegade Keygen (Scanned With Norton AV 2005).exe
C&C Renegade NO CD Crack (Scanned With Norton AV 2005).exe
Call Of Duty [XBOX] - ISO FTP Info.exe
Call Of Duty 2 Keygen - RELOADED.exe
Call Of Duty 2 Keygen (Scanned With Norton AV 2005).exe
Call Of Duty 2 NO CD Crack (Scanned With Norton AV 2005).exe
Call Of Duty Keygen - RELOADED.exe
Call Of Duty Keygen (Scanned With Norton AV 2005).exe
Call Of Duty NO CD Crack (Scanned With Norton AV 2005).exe
Call Of Duty:Finest Hour [GCN] - ISO FTP Info.exe
Call Of Duty:Finest Hour [PS2] - ISO FTP Info.exe
Capcom vs SNK 2 [PS2] - ISO FTP Info.exe
Capcom vs SNK 2 EO [GCN] - ISO FTP Info.exe
Chat Room Booter(Works).exe
CIA Hacker Tool.exe
Civilization 3 Keygen (Scanned With Norton AV 2005).exe
Civilization 3 NO CD Crack (Scanned With Norton AV 2005).exe
Clone CD 5 - Software Keygen.exe
Cloney XXL - Software Keygen.exe
Colin Mcrae 2005 [XBOX] - ISO FTP Info.exe
Colin Mcrae 2005 Keygen - RELOADED.exe
Colin McRae Rally 2005 Keygen (Scanned With Norton AV 2005).exe
Colin McRae Rally 2005 NO CD Crack (Scanned With Norton AV 2005).exe
Colin McRae Rally 4 Keygen (Scanned With Norton AV 2005).exe
Colin McRae Rally 4 NO CD Crack (Scanned With Norton AV 2005).exe
Conker Live & Reloaded [XBOX] - ISO FTP Info.exe
Counter Strike:Source Keygen - RELOADED.exe
Crash Bandicoot TWOC [XBOX] - ISO FTP Info.exe
Crazy Taxi 3 [XBOX] - ISO FTP Info.exe
Dead Or Alive Ultimate [XBOX] - ISO FTP Info.exe
Delphi 7 - Software Keygen.exe
Deus Ex 2 Keygen (Scanned With Norton AV 2005).exe
Deus Ex 2 NO CD Crack (Scanned With Norton AV 2005).exe
Deus Ex 2:Invisible War [XBOX] - ISO FTP Info.exe
Devil May Cry [PS2] - ISO FTP Info.exe
Devil May Cry 2 [PS2] - ISO FTP Info.exe
Diablo 2 Keygen - RELOADED.exe
Direct IP Hacker.exe
Donkey Kong Country 2 [GCN] - ISO FTP Info.exe
Doom 3 - RELOADED ISO FTP Info.exe
Doom 3 [XBOX] - ISO FTP Info.exe
Doom 3 Keygen - RELOADED.exe
DOOM 3 Keygen (Scanned With Norton AV 2005).exe
DOOM 3 NO CD Crack (Scanned With Norton AV 2005).exe
Dragon Ball Z Budokai 2 [GCN] - ISO FTP Info.exe
Dragon Ball Z Budokai 3 [PS2] - ISO FTP Info.exe
Dragon Ball Z: Budokai 3 [PS2] - ISO FTP Info.exe
DRIV3R (Driver 3) [XBOX] - ISO FTP Info.exe
Elder Scrolls 3 Morrowind Keygen (Scanned With Norton AV 2005).exe
Elder Scrolls 3 Morrowind NO CD Crack (Scanned With Norton AV 2005).exe
Email Hacking Tool.exe
Empire Earth Keygen (Scanned With Norton AV 2005).exe
Empire Earth NO CD Crack (Scanned With Norton AV 2005).exe
Enter The Matrix [XBOX] - ISO FTP Info.exe
Enter The Matrix Keygen (Scanned With Norton AV 2005).exe
Enter The Matrix NO CD Crack (Scanned With Norton AV 2005).exe
Exploit Compiler SE.exe
Fable [XBOX] - ISO FTP Info.exe
Far Cry Keygen - RELOADED.exe
Far Cry Keygen (Scanned With Norton AV 2005).exe
Far Cry NO CD Crack (Scanned With Norton AV 2005).exe
FBI Hacker Tool.exe
FiC&C Generals NO CD Crack (Scanned With Norton AV 2005).exe
Fifa 2005 Keygen (Scanned With Norton AV 2005).exe
Fifa 2005 NO CD Crack (Scanned With Norton AV 2005).exe
Final Fantasy 10 [PS2] - ISO FTP Info.exe
Final Fantasy Crystal Cronicles [GCN] - ISO FTP Info.exe
Final Fantasy X [PS2] - ISO FTP Info.exe
Flash FXP All Versions - Software Keygen.exe
Flash FXP Keygen (Scanned With Norton AV 2005).exe
F-Prot AntiVirus Keygen (Scanned With Norton AV 2005).exe
F-Secure Keyfile Generator (Scanned With Norton AV 2005).exe
F-Zero Racing [GCN] - ISO FTP Info.exe
Game4 Ultra - Gamecube Emulator.exe
Gamecube Boot Disc ISO DVD.exe
Get Right 5.1 - Software Keygen.exe
Ghost Recon 2 Keygen - RELOADED.exe
Golden Eye Rogue Agent [PS2] - ISO FTP Info.exe
Golden Eye:Rogue Agent [GCN] - ISO FTP Info.exe
Grabbed By The Ghoulies [XBOX] - ISO FTP Info.exe
Gran Turismo 4 [PS2] - ISO FTP Info.exe
GTA 3 [PS2] - ISO FTP Info.exe
GTA 3 Keygen (Scanned With Norton AV 2005).exe
GTA 3 NO CD Crack (Scanned With Norton AV 2005).exe
GTA Double Pack [XBOX] - ISO FTP Info.exe
GTA San Andreas [PS2] - ISO FTP Info.exe
GTA San Andreas [XBOX] - ISO FTP Info.exe
GTA San Andreas Keygen (Scanned With Norton AV 2005).exe
GTA San Andreas NO CD Crack (Scanned With Norton AV 2005).exe
GTA Vice City [PS2] - ISO FTP Info.exe
GTA Vice City Keygen (Scanned With Norton AV 2005).exe
GTA Vice City NO CD Crack (Scanned With Norton AV 2005).exe
Hacker Tools.exe
Hackers Black Book.exe
Hackers Office.exe
Hackers Paradise.exe
Hacking eBooks.exe
Hacking Exposed 4th Edition.exe
Hacking Exposed 5th Edition.exe
Hacking Tool.exe
Half Life 2 - EMPORiO ISO FTP Info.exe
Half Life 2 [XBOX] - ISO FTP Info.exe
Half Life 2 Keygen - RELOADED.exe
Half Life 2 Keygen (Scanned With Norton AV 2005).exe
Half Life 2 NO CD Crack (Scanned With Norton AV 2005).exe
Half Life 2 STEAM Keygen - RELOADED.exe
Half Life Keygen (Scanned With Norton AV 2005).exe
Half Life NO CD Crack (Scanned With Norton AV 2005).exe
Halo [XBOX] - ISO FTP Info.exe
Halo 2 [XBOX] - ISO FTP Info.exe
Halo CE Keygen - RELOADED.exe
Halo CE Keygen (Scanned With Norton AV 2005).exe
Halo CE NO CD Crack (Scanned With Norton AV 2005).exe
Halo PC Keygen - RELOADED.exe
Halo PC Keygen (Scanned With Norton AV 2005).exe
Halo PC NO CD Crack (Scanned With Norton AV 2005).exe
Hitman 2 Keygen (Scanned With Norton AV 2005).exe
Hitman 2 NO CD Crack (Scanned With Norton AV 2005).exe
Hitman 2:Silent Assasin [XBOX] - ISO FTP Info.exe
Hitman 3 Keygen (Scanned With Norton AV 2005).exe
Hitman 3 NO CD Crack (Scanned With Norton AV 2005).exe
Hitman 3:Contracts [PS2] - ISO FTP Info.exe
Hitman Contracts [XBOX] - ISO FTP Info.exe
Hotmail Hacker Pro SE.exe
Hotmail Hacker Pro.exe
Hunter The Reckoning:The Redeemer [XBOX] - ISO FTP Info.exe
ICMP Flooder.exe
IP Flooder.exe
IP Hacker.exe
IP Nuker.exe
Jade Empire [XBOX] - ISO FTP Info.exe
Jade Empire [XBOX] - ISO FTP Info.exe
Jet Set Radio Future [XBOX] - ISO FTP Info.exe
JPEG Compresser 4.2 - Software Keygen.exe
Juiced [XBOX] - ISO FTP Info.exe
Kaspersky Keyfile Generator (Scanned With Norton AV 2005).exe
Keyhole - Software Keygen.exe
Kill Zone [PS2] - ISO FTP Info.exe
King Of Fighters 2003 [PS2] - ISO FTP Info.exe
Kung Fu Chaos [XBOX] - ISO FTP Info.exe
Legend Of Zelda For Swords [GCN] - ISO FTP Info.exe
Linux (Hacking Tool).exe
Lord Of The Rings FOTH [XBOX] - ISO FTP Info.exe
Lord Of The Rings ROTK [XBOX] - ISO FTP Info.exe
Lord Of The Rings ROTK Keygen (Scanned With Norton AV 2005).exe
Lord Of The Rings ROTK NO CD Crack (Scanned With Norton AV 2005).exe
Lord Of The Rings TTA [XBOX] - ISO FTP Info.exe
Lord Of The Rings:LOTR [GCN] - ISO FTP Info.exe
Lord Of The Rings:ROTK [GCN] - ISO FTP Info.exe
Lord Of The Rings:The Third Age [GCN] - ISO FTP Info.exe
Lord Of The Rings:The Third Age [PS2] - ISO FTP Info.exe
LSASS Hacking Tool.exe
Luigi's Manshion [GCN] - ISO FTP Info.exe
Macromedia Dreamweaver MX Keygen (Scanned With Norton AV 2005).exe
Man Hunt Keygen (Scanned With Norton AV 2005).exe
Man Hunt NO CD Crack (Scanned With Norton AV 2005).exe
Mario Kart Double Dash [GCN] - ISO FTP Info.exe
Mario Party 4 [GCN] - ISO FTP Info.exe
Mario Party 5 [GCN] - ISO FTP Info.exe
Mario Power Tennis [GCN] - ISO FTP Info.exe
Master Hacker Tool.exe
Max Payne 2 Keygen(Scanned With Norton AV 2005).exe
Max Payne 2 NO CD Crack (Scanned With Norton AV 2005).exe
McAfee Anti-Virus - Software Keygen.exe
McAfee Computer Security - Software Keygen.exe
McAfee Firewall - Software Keygen.exe
McAfee Keygen (Scanned With Norton AV 2005).exe
Mech Assault 2 [XBOX] - ISO FTP Info.exe
Mech Warrior 4 Keygen (Scanned With Norton AV 2005).exe
Mech Warrior 4 NO CD Crack (Scanned With Norton AV 2005).exe
Medal Of Honor Allied Assault Keygen (Scanned With Norton AV 2005).exe
Medal Of Honor Allied Assault NO CD Crack (Scanned With Norton AV 2005).exe
Medal Of Honour Allied Assault Keygen - RELOADED.exe
Medal Of Honour Frontline [GCN] - ISO FTP Info.exe
Medal Of Honour:Dogs Of War [XBOX] - ISO FTP Info.exe
Medal Of Honour:Frontline [XBOX] - ISO FTP Info.exe
Medal Of Honour:Rising Sun [XBOX] - ISO FTP Info.exe
Men Of Valor Vietnam Keygen (Scanned With Norton AV 2005).exe
Men Of Valor Vietnam NO CD Crack (Scanned With Norton AV 2005).exe
Men Of Valor:Vietnam [XBOX] - ISO FTP Info.exe
Metal Gear Solid 3 [PS2] - ISO FTP Info.exe
Metal Gear Solid 3:Snake Eater [PS2] - ISO FTP Info.exe
Metroid 2 [GCN] - ISO FTP Info.exe
Metroid Prime [GCN] - ISO FTP Info.exe
Microsoft Longhorn 4051 Keygen (Scanned With Norton AV 2005).exe
Microsoft Longhorn 4071 Keygen (Scanned With Norton AV 2005).exe
Midnight Club 3 [PS2] - ISO FTP Info.exe
Morrowind:GOTY [XBOX] - ISO FTP Info.exe
Mortal Combat Deception [XBOX] - ISO FTP Info.exe
Mortal Combat:Deception [PS2] - ISO FTP Info.exe
Moto GP3 [PS2] - ISO FTP Info.exe
MSN Chat Booter.exe
NBA Live 2004 Keygen(Scanned With Norton AV 2005).exe
NBA Live 2004 NO CD Crack (Scanned With Norton AV 2005).exe
NBA Live 2005 [GCN] - ISO FTP Info.exe
NBA Live 2005 Keygen (Scanned With Norton AV 2005).exe
NBA Live 2005 NO CD Crack (Scanned With Norton AV 2005).exe
Need For Speed Underground [PS2] - ISO FTP Info.exe
Need For Speed Underground 2 - RELOADED ISO FTP Info.exe
Need For Speed Underground 2 [GCN] - ISO FTP Info.exe
Need For Speed Underground 2 [PS2] - ISO FTP Info.exe
Need For Speed Underground 2 [XBOX] - ISO FTP Info.exe
Need For Speed Underground 2 Keygen - RELOADED.exe
Need For Speed Underground 2 Keygen (Scanned With Norton AV 2005).exe
Need For Speed Underground 2 NO CD Crack (Scanned With Norton AV 2005).exe
Need For Speed Underground Keygen (Scanned With Norton AV 2005).exe
Need For Speed Underground NO CD Crack (Scanned With Norton AV 2005).exe
Nero 6 Keygen (Scanned With Norton AV 2005).exe
Nero 7 Keygen (Scanned With Norton AV 2005).exe
Nero ALL Versions - Software Keygen.exe
NetBIOS Auto Rooter.exe
NetBIOS Hacker.exe
Network Hacking Tool.exe
Never Winter Nights 2 Keygen - RELOADED.exe
Never Winter Nights 2 Keygen(Scanned With Norton AV 2005).exe
Never Winter Nights 2 NO CD Crack (Scanned With Norton AV 2005).exe
Never Winter Nights Keygen(Scanned With Norton AV 2005).exe
Never Winter Nights NO CD Crack (Scanned With Norton AV 2005).exe
NHL 2004 Keygen (Scanned With Norton AV 2005).exe
NHL 2004 NO CD Crack (Scanned With Norton AV 2005).exe
NHL 2005 Keygen (Scanned With Norton AV 2005).exe
NHL 2005 NO CD Crack (Scanned With Norton AV 2005).exe
Ninja Gaiden [XBOX] - ISO FTP Info.exe
NOD32 - Software Keygen.exe
Norton Anti-Virus - Software Keygen.exe
Norton AntiVirus 2005 Keygen.exe
Norton Firewall Keygen - Software Keygen.exe
Norton Internet Security - Software Keygen.exe
Norton Internet Security 2005 Keygen.exe
Norton System Mechanic - Software Keygen.exe
Oddworld Munch's Oddysee [XBOX] - ISO FTP Info.exe
Oddworld Strangers Wrath [XBOX] - ISO FTP Info.exe
Office 2000 Keygen (Scanned With Norton AV 2005).exe
Office 2002 Keygen (Scanned With Norton AV 2005).exe
Office 2003 Keygen (Scanned With Norton AV 2005).exe
Office Xp Keygen (Scanned With Norton AV 2005).exe
Panda AV 2005 Keygen (Scanned With Norton AV 2005).exe
Panda Titanium 4 - Software Keygen.exe
Panda Titanium AV 2005 - Software Keygen.exe
Paper Mario [GCN] - ISO FTP Info.exe
Partition Magic 8 - Software Keygen.exe
Partition Magic 8 Keygen (Scanned With Norton AV 2005).exe
PC Cillin Keygen (Scanned With Norton AV 2005).exe
Perfect Dark Zero [XBOX] - ISO FTP Info.exe
Pikmin [GCN] - ISO FTP Info.exe
Playstation 2 Boot Disc ISO DVD.exe
Pocket DVD Studio - Software Keygen.exe
Porn Cleanser - Software Keygen.exe
Port Scanner.exe
Postal 2 Keygen (Scanned With Norton AV 2005).exe
Postal 2 NO CD Crack (Scanned With Norton AV 2005).exe
Powerpoint 2 DVD - Software Keygen.exe
Prince Of Persia:Warrior Within [GCN] - ISO FTP Info.exe
Prince Of Persia:Warrior Within [PS2] - ISO FTP Info.exe
Project Gotham 2 [XBOX] - ISO FTP Info.exe
Quake 3 Keygen - RELOADED.exe
Quake 3 Keygen (Scanned With Norton AV 2005).exe
Quake 3 NO CD Crack (Scanned With Norton AV 2005).exe
Quake 4 BETA 5.72 - RELOADED ISO FTP Info.exe
Rainbow Six 3 Keygen - RELOADED.exe
Rallysport Challenge 2 [XBOX] - ISO FTP Info.exe
RAM Defrag 2.55 - Software Keygen.exe
Red Alert 2 Keygen - RELOADED.exe
Red Alert 2 Keygen (Scanned With Norton AV 2005).exe
Red Alert 2 NO CD Crack (Scanned With Norton AV 2005).exe
Red Faction 2 [XBOX] - ISO FTP Info.exe
Red Faction 2 Keygen (Scanned With Norton AV 2005).exe
Red Faction 2 NO CD Crack (Scanned With Norton AV 2005).exe
Red Faction Keygen (Scanned With Norton AV 2005).exe
Red Faction NO CD Crack (Scanned With Norton AV 2005).exe
Registry Toolkit - Software Keygen.exe
Resident Evil 4 [GCN] - ISO FTP Info.exe
Rome Total War Keygen (Scanned With Norton AV 2005).exe
Rome Total War NO CD Crack (Scanned With Norton AV 2005).exe
RPC DCOM Hacking Tool.exe
Sacred Keygen - RELOADED.exe
Shrek 2:Beg For Mercy [GCN] - ISO FTP Info.exe
Silent Hill 4:The Room [PS2] - ISO FTP Info.exe
Simpsons Hit And Run [GCN] - ISO FTP Info.exe
Simpsons Hit And Run Keygen (Scanned With Norton AV 2005).exe
Simpsons Hit And Run NO CD Crack (Scanned With Norton AV 2005).exe
Smart FTP 1.0 - Software Keygen.exe
Socom [PS2] - ISO FTP Info.exe
Soldier Of Fortune 2 Keygen (Scanned With Norton AV 2005).exe
Soldier Of Fortune 2 NO CD Crack (Scanned With Norton AV 2005).exe
Sonic Adventure DX [GCN] - ISO FTP Info.exe
Sonic Adventure DX 2 [GCN] - ISO FTP Info.exe
Sonic Mega Collection [GCN] - ISO FTP Info.exe
Sonic Mega Collection [XBOX] - ISO FTP Info.exe
Sophos AntiVirus Keygen (Scanned With Norton AV 2005).exe
Soul Calibur 2 [XBOX] - ISO FTP Info.exe
Spiderman 2 [GCN] - ISO FTP Info.exe
Spiderman 2 [XBOX] - ISO FTP Info.exe
Splinter Cell Chaos Theory [XBOX] - ISO FTP Info.exe
Splinter Cell Keygen (Scanned With Norton AV 2005).exe
Splinter Cell NO CD Crack (Scanned With Norton AV 2005).exe
Splinter Cell PT [XBOX] - ISO FTP Info.exe
Splinter Cell PT Keygen (Scanned With Norton AV 2005).exe
Splinter Cell PT NO CD Crack (Scanned With Norton AV 2005).exe
Spyro A Heros Tale [GCN] - ISO FTP Info.exe
Star Fox Adventures [GCN] - ISO FTP Info.exe
Star Wars Battle Front Keygen (Scanned With Norton AV 2005).exe
Star Wars Battle Front NO CD Crack (Scanned With Norton AV 2005).exe
Star Wars Battlefront [XBOX] - ISO FTP Info.exe
Star Wars Galaxies [PS2] - ISO FTP Info.exe
Star Wars KOTOR [XBOX] - ISO FTP Info.exe
Star Wars KOTOR 2 [XBOX] - ISO FTP Info.exe
Star Wars KOTOR Keygen (Scanned With Norton AV 2005).exe
Star Wars KOTOR NO CD Crack (Scanned With Norton AV 2005).exe
Stopzilla 3.2 - Software Keygen.exe
Sub 7 Special Edition (NO SERVER NEEDED).exe
Super Fast IP Scanner.exe
Super Mario Sunshine [GCN] - ISO FTP Info.exe
Super Smash Bro's Melee [GCN] - ISO FTP Info.exe
SYN Flooder.exe
TCP Flooder.exe
The Simpsons Hit And Run [XBOX] - ISO FTP Info.exe
The Sims 2 Keygen (Scanned With Norton AV 2005).exe
The Sims 2 NO CD Crack (Scanned With Norton AV 2005).exe
The Sims:Bustin' Out [XBOX] - ISO FTP Info.exe
The Sims:Bustin'Out [GCN] - ISO FTP Info.exe
The Urbz:Sims In The City [GCN] - ISO FTP Info.exe
TimeSplitters 2 [PS2] - ISO FTP Info.exe
Timesplitters 2 [XBOX] - ISO FTP Info.exe
Tom Clancy's Ghost Recon 2 [PS2] - ISO FTP Info.exe
Tom Clancy's Ghost Recon 2 [XBOX] - ISO FTP Info.exe
Tom Clancy's Ghost Recon Keygen (Scanned With Norton AV 2005).exe
Tom Clancy's Ghost Recon NO CD Crack (Scanned With Norton AV 2005).exe
Tom Clancy's Rainbow Six Keygen (Scanned With Norton AV 2005).exe
Tom Clancy's Rainbow Six NO CD Crack (Scanned With Norton AV 2005).exe
Tony Hawk Underground 2 [GCN] - ISO FTP Info.exe
Tony Hawk Underground 2 [PS2] - ISO FTP Info.exe
Tony Hawk Underground 2 [XBOX] - ISO FTP Info.exe
Tony Hawk Underground 2 Keygen (Scanned With Norton AV 2005).exe
Tony Hawk Underground 2 NO CD Crack (Scanned With Norton AV 2005).exe
Tony Hawk Underground Keygen (Scanned With Norton AV 2005).exe
Tony Hawk Underground NO CD Crack (Scanned With Norton AV 2005).exe
Trojan Kit.exe
Tron 2.0 Keygen (Scanned With Norton AV 2005).exe
Tron 2.0 NO CD Crack (Scanned With Norton AV 2005).exe
True Crime Streets Of LA Keygen (Scanned With Norton AV 2005).exe
True Crime Streets Of LA NO CD Crack (Scanned With Norton AV 2005).exe
True Crimes Streets Of LA - RELOADED ISO FTP Info.exe
True Crimes:Streets Of LA [XBOX] - ISO FTP Info.exe
Tune Up 2004 Keygen (Scanned With Norton AV 2005).exe
Tune Up Utility 2004 - Software Keygen.exe
UDP Flooder.exe
Unreal 2 Keygen - RELOADED.exe
Unreal 2 Keygen (Scanned With Norton AV 2005).exe
Unreal 2 NO CD Crack (Scanned With Norton AV 2005).exe
Unreal 3 BETA 2.654 - RELOADED ISO FTP Info.exe
Unreal Championship [XBOX] - ISO FTP Info.exe
Unreal Championship 2:Liandari Conflict [XBOX] - ISO FTP Info.exe
UT 2003 Keygen - RELOADED.exe
UT 2003 Keygen (Scanned With Norton AV 2005).exe
UT 2003 NO CD Crack (Scanned With Norton AV 2005).exe
UT 2004 Keygen - RELOADED.exe
UT 2004 Keygen Crack (Scanned With Norton AV 2005).exe
UT 2004 NO CD Crack (Scanned With Norton AV 2005).exe
VET AntiVirus Keygen (Scanned With Norton AV 2005).exe
Viewtiful Joe [GCN] - ISO FTP Info.exe
Virus Generator.exe
Visual Basic 6 - Software Keygen.exe
Visual Basic 6 Keygen (Scanned With Norton AV 2005).exe
Visual C# .NET - Software Keygen.exe
Visual C++ ALL VERSIONS - Software Keygen.exe
Visual C++ Keygen (Scanned With Norton AV 2005).exe
War Craft 3 Keygen - RELOADED.exe
War Craft 3 Keygen - RELOADED.exe
Website Defacer (Hack Tool).exe
Windows XP - Software Keygen.exe
Windows XP Hacker.exe
Windows Xp Home Keygen (Scanned With Norton AV 2005).exe
Windows Xp Professional Keygen (Scanned With Norton AV 2005).exe
Winrar 3.x - Software Keygen.exe
WinRAR Keygen (Scanned With Norton AV 2005).exe
WinZIP ALL VERSIONS - Software Keygen.exe
Worm Generator.exe
Xbox Boot Disc ISO DVD.exe
Xenon Ultra - Xbox Emulator.exe
Yahoo Booter.exe
Yahoo Hacker Pro SE.exe
Yahoo Hacker Pro.exe
Yu Gi Of Power Of Chaos Keygen (Scanned With Norton AV 2005).exe
Yu Gi Of Power Of Chaos NO CD Crack (Scanned With Norton AV 2005).exe
Yu-Gi-Oh! [GCN] - ISO FTP Info.exe
Zone Alarm Pro 4.x Crack (Scanned With Norton AV 2005).exe
Zone Alarm Pro 5.x Crack (Scanned With Norton AV 2005).exe
Zoocube [GCN] - ISO FTP Info.exe

Эти названия содержатся в файле list.ini.

Размножение через MSN Messenger

Червь размножается через сеть обмена сообщениями MSN в виде сообщения со ссылкой на основной файл червя. Основной файл находится на ранее зараженном червем компьютере.

Для определния IP-адреса зараженного компьютера червь соединяется со страницей на сайте www.showmyip.com (страница была перемещена, и в настоящее время червь уже не способен произвести этот шаг).

Затем червь ищет находящиеся в режиме онлайн MSN-контакты и отправляет им следующее сообщение:


please download this...its only small brb http:/[server]/msn_addons.exe

[server] подменяется IP-адресом зараженного компьютера. Поскольку страница была перемещена, то сейчас подобное сообщение выглядит следующим образом:

please download this...its only small brb
http:///msn_addons.exe

Сообщение отсылается несколько раз.

Действие

Червь пытается скрыть процесс killILLUMINATI.exe от программ листинга работающих процессов.

Червь может изменить стартовую страницу Internet Explorer на одну из следующих:


http://911sharethetruth.com/extras/pentagon.swf
http://download.911sb.org/911.swf
http://download.911sb.org/911.swf
http://download.911sb.org/911.swf
http://www.911weknow.com/911.swf
http://www.pentagonstrike.co.uk/pentagon.swf
http://www.root.co.yu/pentagon/pentagon.swf
http://www.spycave.com/pentagon.swf
http://www.theundertow.tk/media/videos/_files/Pentagon.swf
www.hugequestions.com/911.swf

Компонент kernel32.exe открывает порт TCP:80 и превращает компьютер в веб-сервер, что позволяет получателям сообщения MSN Messenger скачивать с зараженного компьютера файл червя.

Также kernel32.exe производит DoS-атаку на сайт jamster.com.

Прочее

В файле Message.txt в корневом каталоге диска C: содержится следующий текст:

"The easiest way to gain control of the 
population is to carry out acts of terror the 
public will clamor for such laws if the personal 
security is threatened."

- Joseph Stalin

Другие названия

P2P-Worm.Win32.VB.dg («Лаборатория Касперского») также известен как: W32/Generic.worm!p2p (McAfee), WIN.SCRIPT.WORM.Virus (Doctor Web), W32/Kilati.A.worm (Panda)