[email protected]

Aliases: N/A
Variants: N/A

Classification: Malware
Category: Computer Worm

Status: Inactive
Spreading: Slow
Geographical info: Some parts of Asia, Europe, North and South America, Africa and Australia
Removal: Easy
Platform: W32
Discovered: 02 Aug 2002
Damage: Low

Characteristics: [email protected] was discovered on August 2, 2002. This worm pretend as a Joke program by displaying many picture files then sends itself to an address entered in a field provided or to any email address in the Microsoft Outlook Address Book. Most operating systems affected by this worm are Windows 2000, 95, 98, Me, NT and XP.

More details about [email protected]

Once [email protected] is executed, it does several actions to propagate its infection. The first action is to display a picture in a dialog box like “The Three Little Pigs; Oink! Oink! Oink! Hello Kids.” More pictures are displayed that seem to captivate the user. Then, the last picture that is displayed requires you to send it to a friend wherein you can fill in the field entry with the email address of someone who will also be infected by this worm. The message to be sent has the following characteristics: “Hello, I’m forwarding this for your kids” as the subject and Tarub.scr as the file attachment. When you send it, a notification box will display telling it has successfully sent. Thus, the worm successfully sends itself to other computer.

Infected computers can be opened up to control by unauthorized remote users. Commands may be executed in the system without the user’s consent. This can involve changing the security settings to prevent detection and removal of malware programs. Pop-up and pop-under advertisements may appear in the system whenever it is connected to the Internet. The settings of the browser may also be changed. The desktop may have new shortcuts or background. The user’s browsing habits may also be monitored and recorded. The downloaded files may also be spread to other connected computers.