Chinese Internet Security Response Team (GMT +0800)

April Fool's Day, Storm Worm Comes Back

[Post on : April 1, 2008 19:00 | Category : Worm | by : smallmo] Reship : Original

Today is the April Fool's Day. More friends like joking on this day. The Storm Worm gang also like this day, and they come back after being inactive for a long time.

The new spams began being spread earlier today. We've received lots of spams in our mailbox. The subject lines are as the following:
April Fools' Day
Happy All Fools!
Doh! April's Fool.
I am a Fool for your Love
Gotcha! All Fool!
Happy April Fool's Day.


When users click the link in these spams, they will visit the following websites:

Open in new window

Three files will be downloaded. They are include the following:
funny.exe -- this file will be downloaded automatically in a few seconds after
                   users visit these websites.              
kickme.exe -- when clicks the picture, this file will be downloaded
foolsday.exe -- when clicks the hyperlink "click here", this file will be downloaded

Open in new window

Kaspersky detects them as Email-Worm.Win32.Zhelatin.wt.



Last modified by smallmo onApril 1, 2008 20:22

Betry Says : Email
April 26, 2009 00:23
Protect my computer and eliminate the bugs and viruses.
When you are searching for a great scan that can help you keep your computer running like new, I would suggest that you visit http://www.Search-and-destroy.com. Here I found the antispyware solution from Search-and-destroy and it was exactly what I needed to protect my computer and eliminate the bugs and viruses that would make it run slow, freeze up and shut down. Search-and-destroy Antispyware was the answer to my computer bug problems and it was certainly worth every penny I spent to have this great antispyware to protect my PC. Not only does it work great but it cost less than many of the other scans available.
Pages: 1/1 First page 1 Final page