FastTrack network (Kazaa) share virus too

Sunday, May 19, 2002 by mcs2k1 | Discussion: WinCustomize News

This worm uses the Kazaa file exchange P2P network to spread itself. The Kazaa network allows its users to exchange files with each other using the Kazaa client software. To learn more about the Kazaa network visit their site at: http://www.kazaa.com.

Benjamin is written in Borland Delphi and is approximately 216 Kb in size - it is compressed by the AsPack utility. The size of a file can vary greatly as the worm ends each file with "dust" for masking.

Install
Firstly the worm shows a false error report:


Error
Access error #03A:94574: Invalid pointer operation
File possibly corrupted.
[ OK ]


It copies itself to the %WinDir%\SYSTEM directory as: EXPLORER.SCR.
Benjamin then creates two keys in the system registry:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "System-Service"="C:\WINDOWS\SYSTEM\EXPLORER.SCR"
[HKEY_LOCAL_MACHINE\Software\Microsoft] "syscod"="0065D7DB20008306B6A1"
The worm executes after system restarts.
Borowskisoft Corp
Reply #1 Tuesday, October 22, 2002 6:29 AM
worms are bad
Jhelement47
Reply #2 Friday, December 27, 2002 11:45 AM
i have no idea what to do cuz i love kazaa cuz mp3 dowsnloads are quick and stuff but on the other hand there is to many fuking virus and worms pla suggest me a better software i got kazaa and imesh thos r the only ones i use

Please login to comment and/or vote for this skin.

Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:

  • Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
  • Access to a great community, with a massive database of many, many areas of interest.
  • Access to contests & subscription offers like exclusive emails.
  • It's simple, and FREE!



web-wc01