Skip to main content

WORM_MYPARTY.B - Variant to MYPARTY.A

posted onJanuary 29, 2002
by hitbsecnews

Source: Trend Micro

Similar to WORM_MYPARTY.A, this variant copies itself to C:RecycledREGCTRL.EXE in Windows 9x. In Windows NT it copies itself to C:REGCTRL.EXE and drops a file named msstask.exe in %windows%profile%username%Start MenuProgramsStartup

It also drops the following file which is only visible in MS-DOS prompt: C:RECYCLERF--- (This is the actual file) Or C:RECYCLEDF---> (This is the actual file)

However, between the system dates of January 20–24, 2002 this file with a random filename will not be dropped at C:RECYCLER nor at C:RECYCLED. This is different from the trigger date of WORM_MYPARTY.A which is January 25–29, 2002.

Source

Tags

Audio/Video

You May Also Like

Recent News

Friday, November 29th

Tuesday, November 19th

Friday, November 8th

Friday, November 1st

Tuesday, July 9th

Wednesday, July 3rd

Friday, June 28th

Thursday, June 27th

Thursday, June 13th

Wednesday, June 12th

Tuesday, June 11th

Simplenews subscription

Stay informed - subscribe to our newsletter.
The subscriber's email address.
Keeping Knowledge Free for Over a Decade

Copyright © 2018 Hack In The Box. All rights reserved.

36th Floor, Menara Maxis, Kuala Lumpur City Centre 50088 Kuala Lumpur Malaysia
Tel: +603-2615-7299 Fax: +603-2615-0088