W32.Cabreck • Mcafee: W32/CableNet.worm •
Category: Computer Worm
Europe, North and South America, and some parts of Asia and Australia
17 Jun 2005
The W32.Cabreck program looks for file sharing and network sharing loopholes.
W32.Cabreck Removal Tool
If you have Malware on your computer it will cause annoyances and will damage your system. You should either:
A. Manually remove the infected files from your computer, or
B. Automatically scan your system using trusted software
We recommend that you scan your system for malware. Our partner has a computer worm removal tool to automatically clean W32.Cabreck from your computer.
More details about W32.Cabreck
The W32.Cabreck program uses shared network drives to multiply itself and spread. It also displays error message titled “winzip” and the body contains text saying “cannot open file: it does not appear to be a valid archive. If you downloaded this file, try downloading the file again. You may also a value, “"run" = "Cable.exe".” It also automatically creates Windows registry keys to make the worm run every time the Windows starts. You may also see the following files: FileCryptor.exe, Cable.exe, Microsoft SP4.exe, Acrobat Reader Setup.exe, NAI Mcafee.exe, Norton AV.exex, PGP Free.exe, Password recovery.exe, KazzaP2P.exe, Download accelerator.exe, Linux Source.exe, Winzip.exe, Lotus app.exe, Netscape.exe, Money Manger.exe, Paypal.exe, FixMydoom.exe, BillSux.exe, MorpheusP2P.exe,E_donkey.exe and Calvin and Hobbes.exe. These files can be seen in Windows folder, current folder or local shared folders.
Some files may also have a text body such as this: “Origin= India Type= Netwreck Worm Credicts= [Cable] By Gabe (Gabe Roq's Inc.) Warning= Amazing things will happen, you just wait...Note= Your Death is comming...Anticipation afterall is everything! SignNote= Because Death is only the beginning... Quote= For those who believe no explanation is necessary, for those who don't nothing will suffice.”