P2P-Worm.Win32.VB.dg

В основном файле червя находится еще две программы: MSWINSCK.OCX (размер — 109248 байт), модуль управления winsock для VB-приложений; и еще одна программа, также написанная на VB, осуществляющая функции веб-сервера и имеющая размер 32768 байт.

Инсталляция

Червь размножается через файлообменные сети и в виде рассылаемой на интернет-пейджеры сети MSN Messenger ссылки на основной исполняемый файл червя.

После запуска червь создает следующие файлы в системной папке Windows:

* kernel32.exe — работает как веб-сервер;

* killILLUMINATI.exe — копия основного файла червя;

* list.ini — содержит информацию, использующуюся в процессе саморазмножения;

* MSWINSCK.OCX — представляет собой модуль управления winsock для программ, написанных на Visual Basic. Файл нужен для корректной работы червя и не содержит вредоносных функций.

Также червь создает следующие файлы в корневом каталоге диска C:

* Message.txt — файл содержит текстовое сообщение;

* msn_addons.exe — еще одна копия основного файла червя.

Чтобы запускаться при старте операционной системы, червь добавляет ссылку на свой основной файл в ключ автозапуска системного реестра:

  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "Windows32"="C:\%sysdir%\killILLUMINATI.exe"

При первом запуске червь показывает фальшивое сообщение об ошибке.

Размножение через P2P-сети

Червь проверяет наличие следующих папок:

  
  C:\My Downloads
  C:\My Shared Folder
  C:\My Shared Folder
  C:\Program Files\\bearshare\shared
  C:\Program Files\\Edonkey2000\incoming
  C:\program files\\kazaa\my shared folder
  C:\Program Files\Edonkey2000\\incoming
  C:\Program Files\Files\Kazaa Lite\My Shared Folder
  C:\Program Files\Gnucleus\Downloads
  C:\Program Files\ICQ\shared files
  C:\Program Files\limewire\shared
  C:\Program Files\Morpheus\My Shared Folder
  C:\Program Files\overnet\incoming
  C:\Program Files\Shareaza\Downloads
  C:\Program Files\Tesla\Files
  C:\Program Files\Warez P2P Client\My Shared Folder
  C:\Program Files\winmx\shared
  C:\Program Files\XoloX\Downloads

В случае обнаружения подобных папок, червь копирует себя в них под следующими именами:

  1080 Avalanche [GCN] - ISO FTP Info.exe
  Ad-Aware Pro - Software Keygen.exe
  Age Of Empires 2 Keygen(Scanned With Norton AV 2005).exe
  Age Of Empires 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Age Of Mythology Keygen - RELOADED.exe
  Age Of Mythology Keygen (Scanned With Norton AV 2005).exe
  Age Of Mythology NO CD Crack (Scanned With Norton AV 2005).exe
  Age Of Mythology The Titans Keygen (Scanned With Norton AV 2005).exe
  Age Of Mythology The Titans NO CD Crack (Scanned With Norton AV 2005).exe
  Alcohol 120 % Keygen (Scanned With Norton AV 2005).exe
  Amped [XBOX] - ISO FTP Info.exe
  Amped 2 [XBOX] - ISO FTP Info.exe
  Ape Escape 3 [PS2] - ISO FTP Info.exe
  Ape Escape: Pumped & Primed [PS2] - ISO FTP Info.exe
  Area 51 [GCN] - ISO FTP Info.exe
  Avast AntiVirus Keygen (Scanned With Norton AV 2005).exe
  AVG Keygen ALL VERSIONS (Scanned With Norton AV 2005).exe
  Backyard Wrestling 2 [PS2] - ISO FTP Info.exe
  Batman:Bad Tommorow [GCN] - ISO FTP Info.exe
  Batman:Vengence [GCN] - ISO FTP Info.exe
  Battle Field 1942 Keygen - RELOADED.exe
  Battle Field 1942 Keygen (Scanned With Norton AV 2005).exe
  Battle Field 1942 NO CD Crack (Scanned With Norton AV 2005).exe
  Battle Field Vietnam Keygen - RELOADED.exe
  BIT Defender AntiVirus Keygen (Scanned With Norton AV 2005).exe
  Black And White Keygen - RELOADED.exe
  Black And White Next Gen [PS2] - ISO FTP Info.exe
  Black And White Next Generation Keygen - RELOADED.exe
  Black And White:Next Generation [PS2] - ISO FTP Info.exe
  Black ICE PC Protect Keygen (Scanned With Norton AV 2005).exe
  Bleem Next Gen - PS2 Emulator.exe
  Blinx 2 [XBOX] - ISO FTP Info.exe
  Booter (Hack Tool).exe
  Breath Of Fire Dragon Quest [PS2] - ISO FTP Info.exe
  Brute Force [XBOX] - ISO FTP Info.exe
  Bryce 5 Keygen (Scanned With Norton AV 2005).exe
  Buffy : Chaos Bleeds [XBOX] - ISO FTP Info.exe
  Buffy The Vampire Slayer [XBOX] - ISO FTP Info.exe
  Bullet Proof FTP ALL VERSIONS - Software Keygen.exe
  C&C Generals Keygen - RELOADED.exe
  C&C Generals Keygen (Scanned With Norton AV 2005).exe
  C&C Renegade Keygen (Scanned With Norton AV 2005).exe
  C&C Renegade NO CD Crack (Scanned With Norton AV 2005).exe
  Call Of Duty [XBOX] - ISO FTP Info.exe
  Call Of Duty 2 Keygen - RELOADED.exe
  Call Of Duty 2 Keygen (Scanned With Norton AV 2005).exe
  Call Of Duty 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Call Of Duty Keygen - RELOADED.exe
  Call Of Duty Keygen (Scanned With Norton AV 2005).exe
  Call Of Duty NO CD Crack (Scanned With Norton AV 2005).exe
  Call Of Duty:Finest Hour [GCN] - ISO FTP Info.exe
  Call Of Duty:Finest Hour [PS2] - ISO FTP Info.exe
  Capcom vs SNK 2 [PS2] - ISO FTP Info.exe
  Capcom vs SNK 2 EO [GCN] - ISO FTP Info.exe
  Chat Room Booter(Works).exe
  CIA Hacker Tool.exe
  Civilization 3 Keygen (Scanned With Norton AV 2005).exe
  Civilization 3 NO CD Crack (Scanned With Norton AV 2005).exe
  Clone CD 5 - Software Keygen.exe
  Cloney XXL - Software Keygen.exe
  Colin Mcrae 2005 [XBOX] - ISO FTP Info.exe
  Colin Mcrae 2005 Keygen - RELOADED.exe
  Colin McRae Rally 2005 Keygen (Scanned With Norton AV 2005).exe
  Colin McRae Rally 2005 NO CD Crack (Scanned With Norton AV 2005).exe
  Colin McRae Rally 4 Keygen (Scanned With Norton AV 2005).exe
  Colin McRae Rally 4 NO CD Crack (Scanned With Norton AV 2005).exe
  Conker Live & Reloaded [XBOX] - ISO FTP Info.exe
  Counter Strike:Source Keygen - RELOADED.exe
  Crash Bandicoot TWOC [XBOX] - ISO FTP Info.exe
  Crazy Taxi 3 [XBOX] - ISO FTP Info.exe
  Dead Or Alive Ultimate [XBOX] - ISO FTP Info.exe
  Delphi 7 - Software Keygen.exe
  Deus Ex 2 Keygen (Scanned With Norton AV 2005).exe
  Deus Ex 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Deus Ex 2:Invisible War [XBOX] - ISO FTP Info.exe
  Devil May Cry [PS2] - ISO FTP Info.exe
  Devil May Cry 2 [PS2] - ISO FTP Info.exe
  Diablo 2 Keygen - RELOADED.exe
  Direct IP Hacker.exe
  Donkey Kong Country 2 [GCN] - ISO FTP Info.exe
  Doom 3 - RELOADED ISO FTP Info.exe
  Doom 3 [XBOX] - ISO FTP Info.exe
  Doom 3 Keygen - RELOADED.exe
  DOOM 3 Keygen (Scanned With Norton AV 2005).exe
  DOOM 3 NO CD Crack (Scanned With Norton AV 2005).exe
  Dragon Ball Z Budokai 2 [GCN] - ISO FTP Info.exe
  Dragon Ball Z Budokai 3 [PS2] - ISO FTP Info.exe
  Dragon Ball Z: Budokai 3 [PS2] - ISO FTP Info.exe
  DRIV3R (Driver 3) [XBOX] - ISO FTP Info.exe
  Elder Scrolls 3 Morrowind Keygen (Scanned With Norton AV 2005).exe
  Elder Scrolls 3 Morrowind NO CD Crack (Scanned With Norton AV 2005).exe
  Email Hacking Tool.exe
  Empire Earth Keygen (Scanned With Norton AV 2005).exe
  Empire Earth NO CD Crack (Scanned With Norton AV 2005).exe
  Enter The Matrix [XBOX] - ISO FTP Info.exe
  Enter The Matrix Keygen (Scanned With Norton AV 2005).exe
  Enter The Matrix NO CD Crack (Scanned With Norton AV 2005).exe
  Exploit Compiler SE.exe
  Fable [XBOX] - ISO FTP Info.exe
  Far Cry Keygen - RELOADED.exe
  Far Cry Keygen (Scanned With Norton AV 2005).exe
  Far Cry NO CD Crack (Scanned With Norton AV 2005).exe
  FBI Hacker Tool.exe
  FiC&C Generals NO CD Crack (Scanned With Norton AV 2005).exe
  Fifa 2005 Keygen (Scanned With Norton AV 2005).exe
  Fifa 2005 NO CD Crack (Scanned With Norton AV 2005).exe
  Final Fantasy 10 [PS2] - ISO FTP Info.exe
  Final Fantasy Crystal Cronicles [GCN] - ISO FTP Info.exe
  Final Fantasy X [PS2] - ISO FTP Info.exe
  Flash FXP All Versions - Software Keygen.exe
  Flash FXP Keygen (Scanned With Norton AV 2005).exe
  F-Prot AntiVirus Keygen (Scanned With Norton AV 2005).exe
  F-Secure Keyfile Generator (Scanned With Norton AV 2005).exe
  F-Zero Racing [GCN] - ISO FTP Info.exe
  Game4 Ultra - Gamecube Emulator.exe
  Gamecube Boot Disc ISO DVD.exe
  Get Right 5.1 - Software Keygen.exe
  Ghost Recon 2 Keygen - RELOADED.exe
  Golden Eye Rogue Agent [PS2] - ISO FTP Info.exe
  Golden Eye:Rogue Agent [GCN] - ISO FTP Info.exe
  Grabbed By The Ghoulies [XBOX] - ISO FTP Info.exe
  Gran Turismo 4 [PS2] - ISO FTP Info.exe
  GTA 3 [PS2] - ISO FTP Info.exe
  GTA 3 Keygen (Scanned With Norton AV 2005).exe
  GTA 3 NO CD Crack (Scanned With Norton AV 2005).exe
  GTA Double Pack [XBOX] - ISO FTP Info.exe
  GTA San Andreas [PS2] - ISO FTP Info.exe
  GTA San Andreas [XBOX] - ISO FTP Info.exe
  GTA San Andreas Keygen (Scanned With Norton AV 2005).exe
  GTA San Andreas NO CD Crack (Scanned With Norton AV 2005).exe
  GTA Vice City [PS2] - ISO FTP Info.exe
  GTA Vice City Keygen (Scanned With Norton AV 2005).exe
  GTA Vice City NO CD Crack (Scanned With Norton AV 2005).exe
  Hacker Tools.exe
  Hackers Black Book.exe
  Hackers Office.exe
  Hackers Paradise.exe
  Hacking eBooks.exe
  Hacking Exposed 4th Edition.exe
  Hacking Exposed 5th Edition.exe
  Hacking Tool.exe
  Half Life 2 - EMPORiO ISO FTP Info.exe
  Half Life 2 [XBOX] - ISO FTP Info.exe
  Half Life 2 Keygen - RELOADED.exe
  Half Life 2 Keygen (Scanned With Norton AV 2005).exe
  Half Life 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Half Life 2 STEAM Keygen - RELOADED.exe
  Half Life Keygen (Scanned With Norton AV 2005).exe
  Half Life NO CD Crack (Scanned With Norton AV 2005).exe
  Halo [XBOX] - ISO FTP Info.exe
  Halo 2 [XBOX] - ISO FTP Info.exe
  Halo CE Keygen - RELOADED.exe
  Halo CE Keygen (Scanned With Norton AV 2005).exe
  Halo CE NO CD Crack (Scanned With Norton AV 2005).exe
  Halo PC Keygen - RELOADED.exe
  Halo PC Keygen (Scanned With Norton AV 2005).exe
  Halo PC NO CD Crack (Scanned With Norton AV 2005).exe
  Hitman 2 Keygen (Scanned With Norton AV 2005).exe
  Hitman 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Hitman 2:Silent Assasin [XBOX] - ISO FTP Info.exe
  Hitman 3 Keygen (Scanned With Norton AV 2005).exe
  Hitman 3 NO CD Crack (Scanned With Norton AV 2005).exe
  Hitman 3:Contracts [PS2] - ISO FTP Info.exe
  Hitman Contracts [XBOX] - ISO FTP Info.exe
  Hotmail Hacker Pro SE.exe
  Hotmail Hacker Pro.exe
  Hunter The Reckoning:The Redeemer [XBOX] - ISO FTP Info.exe
  ICMP Flooder.exe
  IP Flooder.exe
  IP Hacker.exe
  IP Nuker.exe
  Jade Empire [XBOX] - ISO FTP Info.exe
  Jade Empire [XBOX] - ISO FTP Info.exe
  Jet Set Radio Future [XBOX] - ISO FTP Info.exe
  JPEG Compresser 4.2 - Software Keygen.exe
  Juiced [XBOX] - ISO FTP Info.exe
  Kaspersky Keyfile Generator (Scanned With Norton AV 2005).exe
  Keyhole - Software Keygen.exe
  Kill Zone [PS2] - ISO FTP Info.exe
  King Of Fighters 2003 [PS2] - ISO FTP Info.exe
  Kung Fu Chaos [XBOX] - ISO FTP Info.exe
  Legend Of Zelda For Swords [GCN] - ISO FTP Info.exe
  Linux (Hacking Tool).exe
  Lord Of The Rings FOTH [XBOX] - ISO FTP Info.exe
  Lord Of The Rings ROTK [XBOX] - ISO FTP Info.exe
  Lord Of The Rings ROTK Keygen (Scanned With Norton AV 2005).exe
  Lord Of The Rings ROTK NO CD Crack (Scanned With Norton AV 2005).exe
  Lord Of The Rings TTA [XBOX] - ISO FTP Info.exe
  Lord Of The Rings:LOTR [GCN] - ISO FTP Info.exe
  Lord Of The Rings:ROTK [GCN] - ISO FTP Info.exe
  Lord Of The Rings:The Third Age [GCN] - ISO FTP Info.exe
  Lord Of The Rings:The Third Age [PS2] - ISO FTP Info.exe
  LSASS Hacking Tool.exe
  Luigi's Manshion [GCN] - ISO FTP Info.exe
  Macromedia Dreamweaver MX Keygen (Scanned With Norton AV 2005).exe
  Man Hunt Keygen (Scanned With Norton AV 2005).exe
  Man Hunt NO CD Crack (Scanned With Norton AV 2005).exe
  Mario Kart Double Dash [GCN] - ISO FTP Info.exe
  Mario Party 4 [GCN] - ISO FTP Info.exe
  Mario Party 5 [GCN] - ISO FTP Info.exe
  Mario Power Tennis [GCN] - ISO FTP Info.exe
  Master Hacker Tool.exe
  Max Payne 2 Keygen(Scanned With Norton AV 2005).exe
  Max Payne 2 NO CD Crack (Scanned With Norton AV 2005).exe
  McAfee Anti-Virus - Software Keygen.exe
  McAfee Computer Security - Software Keygen.exe
  McAfee Firewall - Software Keygen.exe
  McAfee Keygen (Scanned With Norton AV 2005).exe
  Mech Assault 2 [XBOX] - ISO FTP Info.exe
  Mech Warrior 4 Keygen (Scanned With Norton AV 2005).exe
  Mech Warrior 4 NO CD Crack (Scanned With Norton AV 2005).exe
  Medal Of Honor Allied Assault Keygen (Scanned With Norton AV 2005).exe
  Medal Of Honor Allied Assault NO CD Crack (Scanned With Norton AV 2005).exe
  Medal Of Honour Allied Assault Keygen - RELOADED.exe
  Medal Of Honour Frontline [GCN] - ISO FTP Info.exe
  Medal Of Honour:Dogs Of War [XBOX] - ISO FTP Info.exe
  Medal Of Honour:Frontline [XBOX] - ISO FTP Info.exe
  Medal Of Honour:Rising Sun [XBOX] - ISO FTP Info.exe
  Men Of Valor Vietnam Keygen (Scanned With Norton AV 2005).exe
  Men Of Valor Vietnam NO CD Crack (Scanned With Norton AV 2005).exe
  Men Of Valor:Vietnam [XBOX] - ISO FTP Info.exe
  Metal Gear Solid 3 [PS2] - ISO FTP Info.exe
  Metal Gear Solid 3:Snake Eater [PS2] - ISO FTP Info.exe
  Metroid 2 [GCN] - ISO FTP Info.exe
  Metroid Prime [GCN] - ISO FTP Info.exe
  Microsoft Longhorn 4051 Keygen (Scanned With Norton AV 2005).exe
  Microsoft Longhorn 4071 Keygen (Scanned With Norton AV 2005).exe
  Midnight Club 3 [PS2] - ISO FTP Info.exe
  Morrowind:GOTY [XBOX] - ISO FTP Info.exe
  Mortal Combat Deception [XBOX] - ISO FTP Info.exe
  Mortal Combat:Deception [PS2] - ISO FTP Info.exe
  Moto GP3 [PS2] - ISO FTP Info.exe
  MSN Chat Booter.exe
  NBA Live 2004 Keygen(Scanned With Norton AV 2005).exe
  NBA Live 2004 NO CD Crack (Scanned With Norton AV 2005).exe
  NBA Live 2005 [GCN] - ISO FTP Info.exe
  NBA Live 2005 Keygen (Scanned With Norton AV 2005).exe
  NBA Live 2005 NO CD Crack (Scanned With Norton AV 2005).exe
  Need For Speed Underground [PS2] - ISO FTP Info.exe
  Need For Speed Underground 2 - RELOADED ISO FTP Info.exe
  Need For Speed Underground 2 [GCN] - ISO FTP Info.exe
  Need For Speed Underground 2 [PS2] - ISO FTP Info.exe
  Need For Speed Underground 2 [XBOX] - ISO FTP Info.exe
  Need For Speed Underground 2 Keygen - RELOADED.exe
  Need For Speed Underground 2 Keygen (Scanned With Norton AV 2005).exe
  Need For Speed Underground 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Need For Speed Underground Keygen (Scanned With Norton AV 2005).exe
  Need For Speed Underground NO CD Crack (Scanned With Norton AV 2005).exe
  Nero 6 Keygen (Scanned With Norton AV 2005).exe
  Nero 7 Keygen (Scanned With Norton AV 2005).exe
  Nero ALL Versions - Software Keygen.exe
  NetBIOS Auto Rooter.exe
  NetBIOS Hacker.exe
  Network Hacking Tool.exe
  Never Winter Nights 2 Keygen - RELOADED.exe
  Never Winter Nights 2 Keygen(Scanned With Norton AV 2005).exe
  Never Winter Nights 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Never Winter Nights Keygen(Scanned With Norton AV 2005).exe
  Never Winter Nights NO CD Crack (Scanned With Norton AV 2005).exe
  NHL 2004 Keygen (Scanned With Norton AV 2005).exe
  NHL 2004 NO CD Crack (Scanned With Norton AV 2005).exe
  NHL 2005 Keygen (Scanned With Norton AV 2005).exe
  NHL 2005 NO CD Crack (Scanned With Norton AV 2005).exe
  Ninja Gaiden [XBOX] - ISO FTP Info.exe
  NOD32 - Software Keygen.exe
  Norton Anti-Virus - Software Keygen.exe
  Norton AntiVirus 2005 Keygen.exe
  Norton Firewall Keygen - Software Keygen.exe
  Norton Internet Security - Software Keygen.exe
  Norton Internet Security 2005 Keygen.exe
  Norton System Mechanic - Software Keygen.exe
  Oddworld Munch's Oddysee [XBOX] - ISO FTP Info.exe
  Oddworld Strangers Wrath [XBOX] - ISO FTP Info.exe
  Office 2000 Keygen (Scanned With Norton AV 2005).exe
  Office 2002 Keygen (Scanned With Norton AV 2005).exe
  Office 2003 Keygen (Scanned With Norton AV 2005).exe
  Office Xp Keygen (Scanned With Norton AV 2005).exe
  Panda AV 2005 Keygen (Scanned With Norton AV 2005).exe
  Panda Titanium 4 - Software Keygen.exe
  Panda Titanium AV 2005 - Software Keygen.exe
  Paper Mario [GCN] - ISO FTP Info.exe
  Partition Magic 8 - Software Keygen.exe
  Partition Magic 8 Keygen (Scanned With Norton AV 2005).exe
  PC Cillin Keygen (Scanned With Norton AV 2005).exe
  Perfect Dark Zero [XBOX] - ISO FTP Info.exe
  Pikmin [GCN] - ISO FTP Info.exe
  Playstation 2 Boot Disc ISO DVD.exe
  Pocket DVD Studio - Software Keygen.exe
  Porn Cleanser - Software Keygen.exe
  Port Scanner.exe
  Postal 2 Keygen (Scanned With Norton AV 2005).exe
  Postal 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Powerpoint 2 DVD - Software Keygen.exe
  Prince Of Persia:Warrior Within [GCN] - ISO FTP Info.exe
  Prince Of Persia:Warrior Within [PS2] - ISO FTP Info.exe
  Project Gotham 2 [XBOX] - ISO FTP Info.exe
  Quake 3 Keygen - RELOADED.exe
  Quake 3 Keygen (Scanned With Norton AV 2005).exe
  Quake 3 NO CD Crack (Scanned With Norton AV 2005).exe
  Quake 4 BETA 5.72 - RELOADED ISO FTP Info.exe
  Rainbow Six 3 Keygen - RELOADED.exe
  Rallysport Challenge 2 [XBOX] - ISO FTP Info.exe
  RAM Defrag 2.55 - Software Keygen.exe
  Red Alert 2 Keygen - RELOADED.exe
  Red Alert 2 Keygen (Scanned With Norton AV 2005).exe
  Red Alert 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Red Faction 2 [XBOX] - ISO FTP Info.exe
  Red Faction 2 Keygen (Scanned With Norton AV 2005).exe
  Red Faction 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Red Faction Keygen (Scanned With Norton AV 2005).exe
  Red Faction NO CD Crack (Scanned With Norton AV 2005).exe
  Registry Toolkit - Software Keygen.exe
  Resident Evil 4 [GCN] - ISO FTP Info.exe
  Rome Total War Keygen (Scanned With Norton AV 2005).exe
  Rome Total War NO CD Crack (Scanned With Norton AV 2005).exe
  RPC DCOM Hacking Tool.exe
  Sacred Keygen - RELOADED.exe
  Shrek 2:Beg For Mercy [GCN] - ISO FTP Info.exe
  Silent Hill 4:The Room [PS2] - ISO FTP Info.exe
  Simpsons Hit And Run [GCN] - ISO FTP Info.exe
  Simpsons Hit And Run Keygen (Scanned With Norton AV 2005).exe
  Simpsons Hit And Run NO CD Crack (Scanned With Norton AV 2005).exe
  Smart FTP 1.0 - Software Keygen.exe
  Socom [PS2] - ISO FTP Info.exe
  Soldier Of Fortune 2 Keygen (Scanned With Norton AV 2005).exe
  Soldier Of Fortune 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Sonic Adventure DX [GCN] - ISO FTP Info.exe
  Sonic Adventure DX 2 [GCN] - ISO FTP Info.exe
  Sonic Mega Collection [GCN] - ISO FTP Info.exe
  Sonic Mega Collection [XBOX] - ISO FTP Info.exe
  Sophos AntiVirus Keygen (Scanned With Norton AV 2005).exe
  Soul Calibur 2 [XBOX] - ISO FTP Info.exe
  Spiderman 2 [GCN] - ISO FTP Info.exe
  Spiderman 2 [XBOX] - ISO FTP Info.exe
  Splinter Cell Chaos Theory [XBOX] - ISO FTP Info.exe
  Splinter Cell Keygen (Scanned With Norton AV 2005).exe
  Splinter Cell NO CD Crack (Scanned With Norton AV 2005).exe
  Splinter Cell PT [XBOX] - ISO FTP Info.exe
  Splinter Cell PT Keygen (Scanned With Norton AV 2005).exe
  Splinter Cell PT NO CD Crack (Scanned With Norton AV 2005).exe
  Spyro A Heros Tale [GCN] - ISO FTP Info.exe
  Star Fox Adventures [GCN] - ISO FTP Info.exe
  Star Wars Battle Front Keygen (Scanned With Norton AV 2005).exe
  Star Wars Battle Front NO CD Crack (Scanned With Norton AV 2005).exe
  Star Wars Battlefront [XBOX] - ISO FTP Info.exe
  Star Wars Galaxies [PS2] - ISO FTP Info.exe
  Star Wars KOTOR [XBOX] - ISO FTP Info.exe
  Star Wars KOTOR 2 [XBOX] - ISO FTP Info.exe
  Star Wars KOTOR Keygen (Scanned With Norton AV 2005).exe
  Star Wars KOTOR NO CD Crack (Scanned With Norton AV 2005).exe
  Stopzilla 3.2 - Software Keygen.exe
  Sub 7 Special Edition (NO SERVER NEEDED).exe
  Super Fast IP Scanner.exe
  Super Mario Sunshine [GCN] - ISO FTP Info.exe
  Super Smash Bro's Melee [GCN] - ISO FTP Info.exe
  SYN Flooder.exe
  TCP Flooder.exe
  The Simpsons Hit And Run [XBOX] - ISO FTP Info.exe
  The Sims 2 Keygen (Scanned With Norton AV 2005).exe
  The Sims 2 NO CD Crack (Scanned With Norton AV 2005).exe
  The Sims:Bustin' Out [XBOX] - ISO FTP Info.exe
  The Sims:Bustin'Out [GCN] - ISO FTP Info.exe
  The Urbz:Sims In The City [GCN] - ISO FTP Info.exe
  TimeSplitters 2 [PS2] - ISO FTP Info.exe
  Timesplitters 2 [XBOX] - ISO FTP Info.exe
  Tom Clancy's Ghost Recon 2 [PS2] - ISO FTP Info.exe
  Tom Clancy's Ghost Recon 2 [XBOX] - ISO FTP Info.exe
  Tom Clancy's Ghost Recon Keygen (Scanned With Norton AV 2005).exe
  Tom Clancy's Ghost Recon NO CD Crack (Scanned With Norton AV 2005).exe
  Tom Clancy's Rainbow Six Keygen (Scanned With Norton AV 2005).exe
  Tom Clancy's Rainbow Six NO CD Crack (Scanned With Norton AV 2005).exe
  Tony Hawk Underground 2 [GCN] - ISO FTP Info.exe
  Tony Hawk Underground 2 [PS2] - ISO FTP Info.exe
  Tony Hawk Underground 2 [XBOX] - ISO FTP Info.exe
  Tony Hawk Underground 2 Keygen (Scanned With Norton AV 2005).exe
  Tony Hawk Underground 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Tony Hawk Underground Keygen (Scanned With Norton AV 2005).exe
  Tony Hawk Underground NO CD Crack (Scanned With Norton AV 2005).exe
  Trojan Kit.exe
  Tron 2.0 Keygen (Scanned With Norton AV 2005).exe
  Tron 2.0 NO CD Crack (Scanned With Norton AV 2005).exe
  True Crime Streets Of LA Keygen (Scanned With Norton AV 2005).exe
  True Crime Streets Of LA NO CD Crack (Scanned With Norton AV 2005).exe
  True Crimes Streets Of LA - RELOADED ISO FTP Info.exe
  True Crimes:Streets Of LA [XBOX] - ISO FTP Info.exe
  Tune Up 2004 Keygen (Scanned With Norton AV 2005).exe
  Tune Up Utility 2004 - Software Keygen.exe
  UDP Flooder.exe
  Unreal 2 Keygen - RELOADED.exe
  Unreal 2 Keygen (Scanned With Norton AV 2005).exe
  Unreal 2 NO CD Crack (Scanned With Norton AV 2005).exe
  Unreal 3 BETA 2.654 - RELOADED ISO FTP Info.exe
  Unreal Championship [XBOX] - ISO FTP Info.exe
  Unreal Championship 2:Liandari Conflict [XBOX] - ISO FTP Info.exe
  UT 2003 Keygen - RELOADED.exe
  UT 2003 Keygen (Scanned With Norton AV 2005).exe
  UT 2003 NO CD Crack (Scanned With Norton AV 2005).exe
  UT 2004 Keygen - RELOADED.exe
  UT 2004 Keygen Crack (Scanned With Norton AV 2005).exe
  UT 2004 NO CD Crack (Scanned With Norton AV 2005).exe
  VET AntiVirus Keygen (Scanned With Norton AV 2005).exe
  Viewtiful Joe [GCN] - ISO FTP Info.exe
  Virus Generator.exe
  Visual Basic 6 - Software Keygen.exe
  Visual Basic 6 Keygen (Scanned With Norton AV 2005).exe
  Visual C# .NET - Software Keygen.exe
  Visual C++ ALL VERSIONS - Software Keygen.exe
  Visual C++ Keygen (Scanned With Norton AV 2005).exe
  War Craft 3 Keygen - RELOADED.exe
  War Craft 3 Keygen - RELOADED.exe
  Website Defacer (Hack Tool).exe
  Windows XP - Software Keygen.exe
  Windows XP Hacker.exe
  Windows Xp Home Keygen (Scanned With Norton AV 2005).exe
  Windows Xp Professional Keygen (Scanned With Norton AV 2005).exe
  Winrar 3.x - Software Keygen.exe
  WinRAR Keygen (Scanned With Norton AV 2005).exe
  WinZIP ALL VERSIONS - Software Keygen.exe
  Worm Generator.exe
  Xbox Boot Disc ISO DVD.exe
  Xenon Ultra - Xbox Emulator.exe
  Yahoo Booter.exe
  Yahoo Hacker Pro SE.exe
  Yahoo Hacker Pro.exe
  Yu Gi Of Power Of Chaos Keygen (Scanned With Norton AV 2005).exe
  Yu Gi Of Power Of Chaos NO CD Crack (Scanned With Norton AV 2005).exe
  Yu-Gi-Oh! [GCN] - ISO FTP Info.exe
  Zone Alarm Pro 4.x Crack (Scanned With Norton AV 2005).exe
  Zone Alarm Pro 5.x Crack (Scanned With Norton AV 2005).exe
  Zoocube [GCN] - ISO FTP Info.exe

Эти названия содержатся в файле list.ini.

Размножение через MSN Messenger

Червь размножается через сеть обмена сообщениями MSN в виде сообщения со ссылкой на основной файл червя. Основной файл находится на ранее зараженном червем компьютере.

Для определния IP-адреса зараженного компьютера червь соединяется со страницей на сайте www.showmyip.com (страница была перемещена, и в настоящее время червь уже не способен произвести этот шаг).

Затем червь ищет находящиеся в режиме онлайн MSN-контакты и отправляет им следующее сообщение:

  
  please download this...its only small brb http:/[server]/msn_addons.exe
  

[server] подменяется IP-адресом зараженного компьютера. Поскольку страница была перемещена, то сейчас подобное сообщение выглядит следующим образом:

  please download this...its only small brb
  http:///msn_addons.exe

Сообщение отсылается несколько раз.

Действие

Червь пытается скрыть процесс killILLUMINATI.exe от программ листинга работающих процессов.

Червь может изменить стартовую страницу Internet Explorer на одну из следующих:

  
  http://911sharethetruth.com/extras/pentagon.swf
  http://download.911sb.org/911.swf
  http://download.911sb.org/911.swf
  http://download.911sb.org/911.swf
  http://www.911weknow.com/911.swf
  http://www.pentagonstrike.co.uk/pentagon.swf
  http://www.root.co.yu/pentagon/pentagon.swf
  http://www.spycave.com/pentagon.swf
  http://www.theundertow.tk/media/videos/_files/Pentagon.swf
  www.hugequestions.com/911.swf

Компонент kernel32.exe открывает порт TCP:80 и превращает компьютер в веб-сервер, что позволяет получателям сообщения MSN Messenger скачивать с зараженного компьютера файл червя.

Также kernel32.exe производит DoS-атаку на сайт jamster.com.

Прочее

В файле Message.txt в корневом каталоге диска C: содержится следующий текст:

  "The easiest way to gain control of the 
  population is to carry out acts of terror the 
  public will clamor for such laws if the personal 
  security is threatened."
  
  - Joseph Stalin

Другие названия

P2P-Worm.Win32.VB.dg («Лаборатория Касперского») также известен как: W32/Generic.worm!p2p (McAfee), WIN.SCRIPT.WORM.Virus (Doctor Web), W32/Kilati.A.worm (Panda)