[email protected]

Aliases: W32/Traxg-Fam,W32/Traxg-Fam,Email-Worm.Win32.VB.bf
Variants: Worm.Wukill.k,[email protected]

Classification: Malware
Category: Computer Worm

Status: Active & Spreading
Spreading: Fast
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 26 Apr 2004
Damage: Low

Characteristics: The [email protected] application delivers itself to email addresses in the address book of Microsoft Outlook.

More details about [email protected]

Once the [email protected] was executed, it drops a replicate of itself in some folders in the Windows system. The worm also generates a registry entry to make it sure that when the windows starts the worm will run at the same time. The symptoms are the existence of the files and the entries of the registry, and the mounting of the network traffic because of the sent emails to your computer. This worm finds for the contacts in the address book of the Microsoft and then sends a replicate of itself to the found contacts. The worm propagates also manually, under the assertion that the performed is a little helpful, or may be received also accordingly of practices that are poor security, or vulnerable systems or unpatched systems.

The distribution of the channels comprise of email, postings of news groups, peer to peer networks, IRC, and many more. The worm adds a value to the key of the registry. It can also modify a value on the key of the registry. This worm sends itself to the addresses in the address book of the Microsoft Outlook having a Subject of ‘Document’, with an attachment of ‘’ having .exe extension, and having a message containing empty lines. When deleting the files it is optional for the clients to restore the Explore Settings (default). Ever since the [email protected] modifies variety of folder options in your Windows, you may desire to return the display setting of your operating system.