Porn worm infects computers by with a file that looks like a folder
Security Experts at MicroWorld Technologies advise computer users to be wary of an email that comes as a zipped file, promising Japanese and Indonesian pornography. The attachment carries a Worm named “Win32.VB.co’, which infects computers and starts a mass mailing campaign to email addresses found in the victim’s address book.
ÂÂ
“Japanese Porn’, “Miss Indonesian’ and “Hello’ are some of the subject lines of the emails sent out from the infected computer, with message contents like “F****g with me:D’, “Please read again what I have written to you’, “hey Indonesian porn, Agnes Monica’s porn’ and more.
ÂÂ
The names of the attachments may be “Doc 8328328.zip’, “file 2151981.zip’ and “Miyabi 5315261.zip’, just as these numbers are generated randomly. The recipients of the mail get infected once they download and run the attachment.
ÂÂ
What follows is even more interesting! Win32.VB.co proceeds to create an exe file inside every folder in the computer, with the name of the file being the same as that of the folder. Here too, the file shows up with a folder icon. The worm then tries to spread by copying itself into popular file sharing applications. It can log keystrokes and send that to a remote attacker in order to facilitate Identity Theft. It also attempts to turn off AntiVirus applications.
ÂÂ
Other than the email route, Win32.VB.co can also spread via shared folders and P2P applications. This will enable this Worm to spread in a large network within a span of few hours forcing shut down of networks in some cases.