Matt Posted December 24, 2005 Report Share Posted December 24, 2005 This is a very new virus, which is still under investigation and research. However, no real "fix" has been found, and a format is just about the only option at the moment.From Sophos:W32/Sunk-A is a worm for the Windows platform.The worm will display the following fake error message:"An unexpected error has occurred on the execution of this file"W32/Sunk-A will attempt to replace every file on the infected computer that has the extension EXE with a copy of itself. The worm will also copy itself to folders known to be used by popular Peer-To-Peer programs using various names.W32/Sunk-A will send messages to AIM users with one of the following messages and a link to a url that contains an executable:Aim Hacker 1.3 FREE!Best Aim Password Cracker written by ZeX.Better then limewire and kazaa put together!Check my Pics Out!Check out my music!Check out my webcam.Click to join! Better then myspace and xanga!Cool hacking programs!Download Aim Optimized 4.9!Download Dead Aim (5.9+)- NEW!Download my mp3 i made.Download My Profile.Email Hacker Pro 1.5 This is awsome! Free Aim Password Cracker. Use it to hack your friends.Funniest Clip Ever!Game Hacker program download here.Get X-im Chat! Better then AIM!Hack Webcams and Aim accounts with O-Hax! This is the last day it will be outfor free!Have you see this!INFINITE FREE PICS OF ASIAN HOTTIES!Join this free music site!LMAO OMG THIS IS HILARIOUS!LOL Check these Pics out.Lol OMG! Someone posted your picture here!LOL Watch this clip!LOLOL WTF IS THIS?!Make your own Profile!My Xanga!OMG LOOK IT'S YOU!Play the new Aim Online game!See my Beach pictures!!Take my Quiz!THE KEY TO HAPPINESS IS LAUGHTER!This game is badass! Play now!View My BuddyProfileWanna See My Profile! W32/Sunk-A will copy itself to the following locations:C:\skunk.exeC:\Documents and Settings\All Users\Start Menu\Programs\Startup\Skunk.exeC:\WINDOWS\system32\Skunk.exeC:\WINNT\system32\Skunk.exeA:\Skunk.exe W32/Sunk-A will change a large number of registry entries under:HKCU\Software\Microsoft\Windows\CurrentVersion\Policies Quote Link to post Share on other sites
Brandon Posted December 25, 2005 Report Share Posted December 25, 2005 Thanks for the head up Matt Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.