The Web    Google
1/3: Gift-C Worm Spreads Via Email

1/3: Gift-C Worm Spreads Via Email
January 3, 2005

Worm_Gift.C propagates via email. It sends copies of itself as attachment to email messages it sends out. It uses Microsoft Word to compose email messages.

Users are advised to be wary of email messages with any of the following Subject lines:

  • benchmark
  • cool mail
  • Cracks
  • Damn crack...
  • Disk tool
  • freeIRC beta mail list
  • Honey ;)
  • IE Plug-in
  • IE5 security patch
  • Improve your site
  • JsvaScript 4 Docs
  • My Rom list
  • NS Plug-in
  • Secure Communications Inc.
  • Sex Farm - Adult contents
  • Sexy game
  • Shield PAK Installation
  • VB examples
  • y2k fix
  • your dlls

    Upon first execution, this worm displays a message box containing the following strings:

    Install error
    File data corrupt:
    probably due to bad data transmission or bad disk access

    This worm runs on Windows 98, ME, NT, 2000, and XP.

    Technical details can be found at Trend Micro page.

  • 9/8: Rbot-IL Spreads To Remote Shares
  • ISPs Band Together Against Spam
  • 2/3: Rbot-SQ Worm Has Backdoor Abilities
  • 4/22: Kelvir-R Trojan Hits IM Contacts
  • Intellitactics Upgrades Security Manager Tool
  • 1/26: Patco-A Worm Replaces Doc Files
  • Virus Alert: Worm Uses Own SMTP Engine to Spread
  • Alliance Formed to Finger Hackers
  • This Python Really Eats Bugs
  • Network Security Management Market Heats Up
  • Biometrics Makes Passwords Positively Paltry
  • Home Security Camera Background