Home Schools Links Virus List Add a School Change a Link Dead Link
Link to us Financial Aid Free E-mail Guestbook Cool Links Tell A Friend
NextCard Visa If your School has a Schools Alumni Page let us know Solve your computer needs at eBay


Plage2000
ALIAS:
Plage 2000, P2000, I-Worm.Plage. Worm.P2000

 
Tell A Friend
about this
Page
Tell me when
this page
is updated
Link to us
Our Sponsor

    This worm was first published on some virus distribution sites before 10th of January 2000. Several days later it was found in the wild in several countries.
    The worm itself is a PE executable 102400 bytes long. The worm has a WinZip icon pretending to be a self-extracting ZIP archive.
    It arrives as an e-mail attachment and being run installs itself to system as INETD.EXE to root Windows folder.
    The worm then modifies WIN.INI file and Registry to be run during every Windows sessions.
    Being active in memory the worm communicates with MAPI-compatible e-mail browsers, looking for unanswered messages and replies to them itself.
    The worm's reply message looks like an ordinary autoreply that many people use while they can't read their e-mails:
P2000 Mail auto-reply:
' I'll try to reply as soon as possible.
Take a look to the attachment and send me your opinion! '
> Get your FREE P2000 Mail now! <
    The worm's body is always attached to the message. The file name of the attachment is randomly selected by the worm from the following variants:

pics.exe        images.exe
joke.exe        PsPGame.exe
news_doc.exe    hamster.exe
tamagotxi.exe   searchURL.exe
SETUP.EXE       Card.EXE
billgt.exe      midsong.exe
s3msong.exe     docs.exe
humor.exe       fun.exe

    When a recepient gets this message and clicks on the attachment (which, he thinks is a ZIP archive) the worm infects his system.
    First the worm outputs a WinZip Self-Extractor Look like dialog
    When a user clicks on 'Unzip' or 'Run WinZip' buttons the worm displays a fake error message and installs itself to system.
    If 'Close' button is clicked the worm installs itself to system and exits without displaying anything. If any other button is clicked a standard Windows error message is displayed and the worm installs itself to system as well.
    Being active the worm checks date and time and on Wednesdays after midnight it tries to display a dialog with a picture and the following text:
Fight against the plage of inhumanity.
This is Plage 2000 coded by Bumblebee/29a.
    The worm doesn't have any destructive payload. But as it spreads itself with a trustworthy message so it may become widespread quickly.

 


 

[an error occurred while processing this directive]

Gator fills out forms and remembers passwords!


Howdy!!!
Welcome to the McCann's PooR Farm
I'm not with any school or schools,
Just a disable grandpa with 17 grand kids, 1 Great grand Kid
 
Sorry! about all of the adds, Our Cost just keeping going up.
Please click on one of them and help us out. or
Send $1.00 U.S. to:
McCann's Poor Farm
20509 Lawrence 2207
Aurora, Mo. 65605-7275
Thank You,
Junior McCann
Webmaster
and the GrandKids
 
See what the experts have to say about the McCann's Poor Farm Web Page
 
Legal Disclaimer - We Are in no way connected with any School and or Companies linked to this page. Links are provided as a courtesy only.

Where Visitors Come From:

Argentina, Australia, Austria, Belarus, Belgium, Bermuda, Brazil, Brunei Darussalam, Bulgaria, Canada, Chile, Columbia, Costa Rica, Croatia, Croatia/Hrvatska, Czech Republic, Denmark, Dominican Republic, Ecuador, Egypt, Estonia, Finland, France, Germany, Ghana, Greece, Hong Kong, Hungary, Iceland, India, Indonesia, Ireland, Israel, Italy, Japan, Jordan, Korea, Korea, Republic of, Latvia, Lebanon, Lithuania, Luxembourg, Macedonia, Malaysia, Mexico, Moldova, Netherlands, New Calendonia, New Zealand, Norway, Old style Arpanet, Papua New Guinea, Peru, Philippines, Poland, Portugal, Romania, Russian Federation, Saudi Arabia, Singapore, Slovakia, Slovenia, South Africa, South Korea, Spain, Sweden, Switzerland, Taiwan, Thailand, Turkey, Uganda, Ukraine, United Arab Emirates, United Kingdom, United States, Uruguay, USA Government, USA Military, Viet Nam
Tell A Friend
about this Page
Tell me when this page
is updated

Click Here!


Home Schools Links Virus List Add a School Change a Link Dead Link
Scholarships Financial Aid Free E-mail Guestbook Cool Links Tell A Friend
Put a Link on your Web Page

- Legal Disclaimer -
This Website Is For Your Entertainment Purposes Only!
We Are in no way connected with
any School and or Companies linked to this page.
Links are provided as a courtesy only.
 
http://www.poor-farm.com/
webmaster@poor-farm.com
McCann's PooR Farm
Aurora, Mo. 65605
© 2001