high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for disinfecting macro viruses.
Please follow the instructions for removing worms.
More Information
VBS/PeachyPDF uses a feature in the full version of Adobe Acrobat to execute its code from a PDF file.
The PDF file will arrive by email and the subject will contain one of the following:
"You have one minute to find the peach"
"Find the peach"
"Find"
"Peach"
The text of the message will be one of the following:
"Try finding the peach"
"Try this"
"Interesting search"
"I don't usually send this things, but..."
The attachment will be called one of the following:
"find.pdf"
"peach.pdf"
"find the peach.pdf"
"find_the_peach.pdf"
"joke.pdf"
"search.pdf"
When the user opens the attachment, a PDF with the title "You have one minute to find the peach" is displayed.
If the user follows the instructions in the PDF, using the full version of Acrobat, Acrobat will extract the worm and run it. It will display an image with the text "Line1,picture6" while it is using Outlook to mail itself out.
|
