Saltar al contenido principal

Once Again A Virus Targets The KaZaA Network - Duload

22 de agosto de 2002

Kaspersky Labs reports the detection of the network worm "Duload", which is spreading across the KaZaA file-exchange network. Presently Kaspersky Labs has already received several registered instances of infection in Italy. The worm itself is a Windows (PE EXE) attachment written in Visual...


Kaspersky Lab reports the detection of the network worm Duload, which is spreading across the KaZaA file-exchange network. Presently Kaspersky Lab has already received several registered instances of infection in Italy. The worm itself is a Windows (PE EXE) application written in Visual Basic. Currently two modifications of the Duload worm are known, each having a different file size:
  • Worm.P2P.Duload.a - 18432 bytes
  • Worm.P2P.Duload.b - 7680 bytes (Compressed with the UPX utility) If the infected attachment is accidentally opened "Duload" copies itself to the Windows system directory under the name "SystemConfig.exe" and modifies the system registry so that this file automatically loads each time Windows is started. Next, the Duload worm creates a folder in the Windows directory called "Media" and copies itself to this directory under 39 different names. Such as:
    • Pamela Anderson And Tommy Lee Home Video.exe
    • Alicia Silverstone Payboy Nude.exe
    • Kama Sutra Tetris.exe
    • Soldier Of Fortune 2 Mutiplayer Serial Hack.exe
    • The Sims Game Crack.exe
    • Warcraft 3 Battle.net Crack.exe "Duload" then once again modifies the system registry in order to make the "Media" folder accessible to all other KaZaA network users. One modification of the worm (Worm.P2P.Duload.a) also downloads from an Internet site several Trojan programs designed to establish the unauthorized remote management of victim computers. The defense against "Duload" has already been added to the Kaspersky Lab Anti-virus database. More detailed information regarding the Duload network worm can be found in the Kaspersky Lab Virus Encyclopedia.

    • Once Again A Virus Targets The KaZaA Network - Duload

    Kaspersky Labs reports the detection of the network worm "Duload", which is spreading across the KaZaA file-exchange network. Presently Kaspersky Labs has already received several registered instances of infection in Italy. The worm itself is a Windows (PE EXE) attachment written in Visual...
    Kaspersky logo

    Sobre Kaspersky

    Kaspersky es una empresa de ciberseguridad y privacidad digital global fundada en 1997. Con más de mil millones de dispositivos protegidos hasta la fecha contra amenazas cibernéticas emergentes y ataques selectivos, la profunda inteligencia de amenazas y la experiencia en seguridad de Kaspersky se transforman constantemente en soluciones y servicios innovadores para proteger a personas, negocios, infraestructuras críticas y autoridades gubernamentales en todo el mundo. La cartera de seguridad integral de la empresa incluye protección digital líder para dispositivos personales, productos y servicios de seguridad especializados para empresas, así como soluciones de ciberinmunidad para combatir amenazas digitales sofisticadas y en evolución. Ayudamos a millones de personas y a casi 200 000 clientes corporativos a proteger lo que más les importa. Más información en www.kaspersky.com.

    Artículo relacionado Comunicados de prensa