W32/Coconut-A

Category: Viruses and Spyware Protection available since:15 Jul 2003 00:00:00 (GMT)
Type: Win32 executable file virus Last Updated:15 Jul 2003 00:00:00 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Coconut-A is a prepending virus written in C# and also a mass mailing worm.

W32/Coconut-A is a prepending virus written in C# and also a mass mailing worm.

W32/Coconut-A places a dropper copy of itself as C:\coconut.exe and temporarily
drops VBS/Coconut-A as C:\mail.vbs. The virus then uses the VBScript to mail
the dropper to all entries in the Windows address book using a mail with the
following characteristics:

Subject: "The Coconut Game"
Message Text: "This game made me feel like I was on a vacation :)"
Attached File: coconut.exe

W32/Coconut-A will then display a 'Coconut Shy' game, in which the user has 3
goes at hitting a picture of either Frans Devaere (for 1 point) or Graham
Cluley (for 2 points) by pressing a button. The virus then infects 6-<score>
files on the system.

download Try Sophos products for free
Download now