Skunk.exe Virus


Recommended Posts

This is a very new virus, which is still under investigation and research. However, no real "fix" has been found, and a format is just about the only option at the moment.

From Sophos:

W32/Sunk-A is a worm for the Windows platform.

The worm will display the following fake error message:

"An unexpected error has occurred on the execution of this file"

W32/Sunk-A will attempt to replace every file on the infected computer that has the extension EXE with a copy of itself. The worm will also copy itself to folders known to be used by popular Peer-To-Peer programs using various names.

W32/Sunk-A will send messages to AIM users with one of the following messages and a link to a url that contains an executable:

Aim Hacker 1.3 FREE!

Best Aim Password Cracker written by ZeX.

Better then limewire and kazaa put together!

Check my Pics Out!

Check out my music!

Check out my webcam.

Click to join! Better then myspace and xanga!

Cool hacking programs!

Download Aim Optimized 4.9!

Download Dead Aim (5.9+)- NEW!

Download my mp3 i made.

Download My Profile.

Email Hacker Pro 1.5 This is awsome! :)

Free Aim Password Cracker. Use it to hack your friends.

Funniest Clip Ever!

Game Hacker program download here.

Get X-im Chat! Better then AIM!

Hack Webcams and Aim accounts with O-Hax! This is the last day it will be out

for free!

Have you see this!

INFINITE FREE PICS OF ASIAN HOTTIES!

Join this free music site!

LMAO OMG THIS IS HILARIOUS!

LOL Check these Pics out.

Lol OMG! Someone posted your picture here!

LOL Watch this clip!

LOLOL WTF IS THIS?!

Make your own Profile!

My Xanga!

OMG LOOK IT'S YOU!

Play the new Aim Online game!

See my Beach pictures!!

Take my Quiz!

THE KEY TO HAPPINESS IS LAUGHTER!

This game is badass! Play now!

View My BuddyProfile

Wanna See My Profile!

W32/Sunk-A will copy itself to the following locations:

C:\skunk.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Skunk.exe

C:\WINDOWS\system32\Skunk.exe

C:\WINNT\system32\Skunk.exe

A:\Skunk.exe

W32/Sunk-A will change a large number of registry entries under:

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...