[ WORM_QQPASS.AHA ]
Friday, 10 November 2006( 9:18 am )
haha.. quite sometimes nv bloggie le...
ytd just brought a 100GB maxtor external harddisk for a $88!!!.. haha!! all thanks for rui xiang.. he said the challenger shop in a old building at tampines interhange is having closing sale.. the old building going to be renovate ma.. wah.. song.. soooo cheap..
ytd busy like siao.. have to reformat my computer, have to rush my assignment.. soo wtf.. all becox of that stupid virus. oh ya.. by the way.. it is actually the sxs.exe who is doing all those FUNNY things on my computer.. WTF! lala..
WORM_QQPASS.AHA
Description:
This worm spreads by dropping copies of itself in all available removable drives.
It also drops the file AUTORUN.INF to enable its automatic execution.
It also terminates several processes found running on the affected system. It may also delete registry data values under certain registry keys.
Once installed, this worm checks for the presence of QQ Instant Messaging Application. If affected machines have the aforementioned application installed, it proceeds to log chat conversations and account information. It sends stolen information to a remote malicious user using its own Simple Mail Transfer Protocol (SMTP) engine.
neh neh de..