high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
Please read the instructions for removing worms.
Windows NT/2000/XP
In Windows NT/2000/XP you will also need to edit the following registry entry. The removal of this entry is optional in Windows 95/98/Me.
At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.
Locate the HKEY_LOCAL_MACHINE entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\FreeGift
and delete it if it exists.
Close the registry editor.
You may also wish to remove the following registry entry:
HKLM\Software\FreeGift\FreeGift by Zed & FrostByte
this is optional.
More Information
W32/FreeGift-A is a worm which uses Microsoft Outlook to spread.
W32/FreeGift-A copies itself into the Windows system folder and adds the value "FreeGift" to the registry entry
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\FreeGift
so that the worm runs when Windows starts.
W32/FreeGift-A creates the registry entry
HKLM\Software\FreeGift\FreeGift by Zed & FrostByte
as an infection marker.
When run W32/FreeGift-A sends itself to all entries from the Outlook address book in an email with the following characteristics:
Subject line chosen from:
Hello!
How are you!
Have a nice day!
Congrats!
Congratulations
Hey you!
Your Gift!
Collect your gift!
Collect your free gift!
Your free gift!
Free gift!
Free download!
Collect your prize!
FREE Gift!
FREE Software!
FREE Prize!
FREE Download!
FREE Gift waiting!
Hey <Recipient name>
A Gift for <Recipient name>
FREE Gift for <Recipient name>
<Recipient name>, Your Gift is waiting!
<Recipient name>, Collect your Gift!
Gift for <Recipient name> Somebody Cares!
Hello, <Recipient name>
A Prize for <Recipient name>
<Recipient name>, Here is your Prize!
<Recipient name>, Here is your Gift!
<Recipient name>, Here is your Software!
<Recipient name>, Here is your Download!
Free software to enjoy
Free gift to enjoy
Free game to enjoy
Free download to enjoy
Message text:
<mark line>
"Free Gift" Requested For: <Recipient name>
This email was originally requested by this very kind person to send you a free gift! Your free gift (in the attached files) is an installation package that will download your free software (along with the setup file) from our home page (http://www.freegift.com/index.html) If you have any setup difficulties or troubleshooting on how to use the setup, contact <address1>@freegift.<address2> and you will be emailed back shortly.
<mark line>
Have fun with your free gift!
Where <mark line> is chosen from:
<<<<<<<>>>>>>><<<<<<<>>>>>>><<<<<<<>>>>,
--------------------------------------- =======================================, #######################################
***************************************
<address1> is chosen from:
webmaster
emailbot
freeg
freesoftware
freenet
freestuff
freerequest
freemailer
freemail
freedata
freehome
freeweb
and <address2> is chosen from:
com
net
org
|
