birding-aus

VIRUS WARNING

To: Birding-aus <>
Subject: VIRUS WARNING
From: Penn Gwynne <>
Date: Tue, 1 Oct 2002 17:10:27 -0700 (PDT)

The worm creates several files; their names are generated using the serial number of the C: drive of the infected machine. This means the names will vary from one machine to another.

It copies itself to two locations, the System directory and the Startup folder, which it reads from the following registry key:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Startup



Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
<Prev in Thread] Current Thread [Next in Thread>
Admin

The University of NSW School of Computer and Engineering takes no responsibility for the contents of this archive. It is purely a compilation of material sent by many people to the birding-aus mailing list. It has not been checked for accuracy nor its content verified in any way. If you wish to get material removed from the archive or have other queries about the archive e-mail Andrew Taylor at this address: andrewt@cse.unsw.EDU.AU