| Property | Value |
|---|
| rdf:type | |
| rdfs:label | |
| rdfs:comment | - <default>Unicle</default> Type Subtype Creator(s) Date Place of Origin Source Language Platform File Type Aliases Family File Size Infection Size Infection Impact Reported Costs MD5 Hash SHA1 Hash CRC32 Hash This worm is able to work on Chinese versions of Windows only, and spreads itself by sending infected e-mail messages. The virus has two components: a script program and Windows PE .exe file. The first component (script) is sent in infected e-mails, infects the computer, then downloads and executes a .exe. That's the component that completes the infection and spreads the worm copies further.
|
| dcterms:subject | |
| dbkwik:malware/property/wikiPageUsesTemplate | |
| Date | |
| Platform | |
| Name | |
| Type | |
| Subtype | |
| fsize | |
| abstract | - <default>Unicle</default> Type Subtype Creator(s) Date Place of Origin Source Language Platform File Type Aliases Family File Size Infection Size Infection Impact Reported Costs MD5 Hash SHA1 Hash CRC32 Hash This worm is able to work on Chinese versions of Windows only, and spreads itself by sending infected e-mail messages. The virus has two components: a script program and Windows PE .exe file. The first component (script) is sent in infected e-mails, infects the computer, then downloads and executes a .exe. That's the component that completes the infection and spreads the worm copies further.
* It spreads by attacking IP addresses connected to the Internet obtained at random.
* It tries to access the compromised IP address by exploiting an existing vulnerability that hasn't been fixed or through an open port. If it does this, it copies itself onto the compromised computer.
|
