pe_conut.a .NET arc. virus

[NullDevice]

from Trend Micro


QUICK LINKS Solution

--------------------------------------------------------------------------------

Virus type: File Infector

Destructive: No

Aliases: W32.HLLP.Conut@mm, Win32/Cotan.A@mm, I-Worm.Conut, Win32.NET.Coconut, W32/Coconut, Win32:Kokon [Wrm], W32/Coconuts

Overall risk rating: Low

Reported infections: Low

Damage Potential: High

Distribution Potential: High



Source here http://c.moreover.com/click/here.pl?r80443118

[BD]Hobbit]

The win32.net.coconut virus that null mentioned is a file infector that runs on the Microsoft.NET framework. It randomly infects EXE files found in the Windows directory based on a random number generated through the following dialog:

(view attachment)


This virus drops a VBScript component that sends it out via email using Microsoft Outlook to a maximum of 3,000 recipients found in the Outlook address book. The mass-mailing component sends out the following email:

Subject: The Coconut Game
Message body: This game made me feel like I was on a vacation :)
Attachment: coconut.exe


Watch out for it.

BD]Hobbit

[Cybr1d]

Sorry if I sound rude(not trying to) but as soon as I posted about a couple of trojans discovered on the 29th, I got flamed and neged by a few pple. I know you guys have been here longer than me and I appreciate it when u post about viruses and stuff *since i dont update mine regularly* but we'd all appreciate it too if we try to post about viruses and get some greenies for it instead of gettin neged for weird reasons

[thehorse13]

The reason you were negged was:

1) You posted information that was discussed in great detail in several other posts, demostrating that you didn't search the forums before posting.
2) You were corrected in a very friendly manor and then you proceded to show that you had no idea what you were talking about by asking a question without checking the facts.

Here is the thread incase others are interested:
http://www.antionline.com/showthread.php?s=&threadid=246823

Now, in this thread you broke another unspoken rule, you bitched about APs - another sure way to get a stack of them.

I suggest you read the site FAQ before you insert thy foot in your mouth again.

http://www.antionline.com/misc.php?action=faq

[Cybr1d]

????? Man u need to enjoy life more and stop being so negative. :D

[thehorse13]

My enjoyment of life has nothing to do with you not following simple rules here.

How am I being negative by trying to teach you how to behave properly so that you don't end up taking away from the benefit of coming to this site? It is obvious that you are incorrigible.

[Cybr1d]

oh daddy sorry for missbehaving...please dont spank me...LOL...dude...i know the rules...I was following the rules...I'm here for the same reason as you. Help pple and be helped when I need it. You just need to lighten up a bit. I'm not even gonna waste any more of my time on you because u just dont understand. I wasn't trying to be rude or mean to you or anybody with that post. I was just defending myself from unneccessary comments by you. Peace