W32.HLLW.Kickin - CreditNumber.src (D)

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.HLLW.Kickin

Sender:

Spoofs the sender's email address.
or
Admin@hackers.com (AD)
Admin@jokes.com (AD)
Admin@screensavers.com (AD)
ebmaster@Loveforlife.com (AD)
flipbabe@hotmail.com (AD)
Lovergirl@hotmail.com (AD)
mailinglist@healthcare.com (AD)
mailinglist@Msn.com (AD)
SecurityResponse@symantec.com (AD)
Soccerfan@yahoo.com (AD)
Support@microsoft.com (AD)
Webmaster@beautifulgirls (AD)
Webmaster@Outwar.com (AD)
Webmaster@planet-source-code.com (AD)
webmaster@screensavers.com (AD)

Subject:

Api Hooking Tutorial... (A)
And Nine, Nine where gifted to the race of men... (D)
Check out this [Random word list1][Random word list2][Random word
list3] (D)
(where
[Random word list1]= New, Nice, Sweet, Cool
[Random word list2]= free, full, working, good
[Random word list3]= screensaver, utility, tool, game)
Christina Aguilera:The most beautiful girl on earth (A)
Critical Vulnerability found (D)
Critical:Windows RPC DCOM Vulnerability (MS03-026) (D)
Do you remember last summer? (A)
Experst Exchange: Providing IT information that drives the enterprise
(D)
Feel the reason why we fall in love... (A)
Forget yahoo,google,hotmail etc...Start surfing to my Website!!! (D)
Fwd: [Random word list1][Random word list2][Random word list3] (D)
(where
[Random word list1]= New, Nice, Sweet, Cool
[Random word list2]= free, full, working, good
[Random word list3]= screensaver, utility, tool, game)
Fw:Become a PREMIUM MEMBER of Experts-Exchange!...FREE! (D)
Fw:Become the Beta Tester for the BEST GAME EVER!
Fw:Check out this sweet screensaver!
fw:fw:Anti Sobig tool (D)
Fw:Fw:Become a Professional VC++ developper (D)
Fwd:Fwd:Fwd:Sit back and be surprised... (A)
Fwd:Fwd:Whats really happening in bagda (A)
Fw:It all began with the forging of the rings... (D)
Fw:Mtv Voting: Vote now for SoulFly, Slipknot and much more
Fw:One Ring to rule them all,One Ring to find them.. (D)
Fw:Virus Alert: W32.Sobig.F@mm (D)
Fw:Vote now for SoulFly, SlipKnot, Sepultura, Korn, Ill Nino,
Hatebreed, Saliva, Slayer, StoneSour, Metallica, Machine Head,
KillSwith Engage ...and much more
Get the new Msn 5.1! (A)
How to protect yourself against SARS (A)
IMPORTANT:Your Password (D)
I worked very hard on this program (D)
Kickin.C (D)
Microsoft Security Bulletin:MS03-026 (D)
MS03-026 RPC DCOM vulnerability Patch (D)
My Homepage!!! (D)
New virus => The worst ever?? (D)
Outwar is proud to present you:Outwar InterActive (A)
Re:
Re:[Random word list1][Random word list2][Random word list3] (D)
(where
[Random word list1]= New, Nice, Sweet, Cool
[Random word list2]= free, full, working, good
[Random word list3]= screensaver, utility, tool, game)
Re:Credit Number assigned to your account (D)
Re:Free Pro membership! (D)
Re:It all began with the forging of the rings... (D)
Re: I think your infected with SoBig (D)
Re:More Metal on TV!!!Soulfly and Slipknot!
Re:My own Homepage!:D (D)
Re:Nice screensaver
Re:Password for you (D)
Re:Personal (D)
Re:Request approved: [Random word list1][Random word list2] (D)
(where
[Random word list1]= personal, private, secret
[Random word list2]= password, documents, details, account-number)
Re:Ref 003205246-APPROVED (D)
Re:SoulFly...SlipKnot And Sepultura
Re: Your [Random word list1][Random word list2] (D)
(where
[Random word list1]= personal, private, secret
[Random word list2]= password, documents, details, account-number)
Re:Your credit card number (D)
Re:Your pass (D)
Re:Your request has been approved (D)
Re:You have been selected to beta test this game
Re:Wanna BETA TEST this?
Ref. #0032697-USERID: 1329 (D)
Ref 5058336: [Random word list1][Random word list2] (D)
(where
[Random word list1]= personal, private, secret
[Random word list2]= password, documents, details, account-number)
Reference n.0051488 APPROVED (D)
Saddam a live and kickin (A)
Technology: our end? (D)
The Lord Of The Rings:The return of the king:Preview  (D)
The Magic screensaver (A)
The trilogy continues..Lord Of The Rings  (D)
The Virtual Joke... (A)
u wanted to hack? (A)
Warning from Symantec.com (A)
What about Beta Testing this for free!
Windows Hotfix! (A)
Your credit card number (D)
Your Password (D)

Message:

5/4/2003 A NEW INTERNET WORM HAS BEEN FOUND IN THE WILDA new very
dangerous internet worm has been found in the wild.This worms goes
under the name W32.SqlSlammer.C@mm and has the possibility tospread by
several ports on your pc(139,25,445,446,10252).It will infect you
without your knowlegde because it uses the Sql Buffer Overflow
exploit...(A)
A security issue has been identified that could allow an attacker to
compromise a computer running Microsoft Windows and gain control over
it.You can help protect your computer by installing this update from
Microsoft.The vulnerability called Windows RPC DCOM exploit could
allow an attacker to run the code of choise.The recent outbreaks of
Blaster and Welchia worm have proved the vulnerability to be very
critical allowing a well made internet worm to knock-out one
hundred-thousands of users in a matter of hoursPlease aply the
attached path to protect your system from any possible
attacks.Microsft Security Respons. (D)
Attached is the HotFix for several bugs in Windows Operating
Systems.The following Windows versions are vulnerable:Windows Xp home
and Pro edition (with/without SP1)Windows ME,2000 and NT Home and Pro
Edition(With/without SP)Windows 98 Home,Pro and Special
Edition(With/without SP)The following Windows Operating Systems are
not vulnerable:Windows 95(All editions With or Without SpMicrosoft
IIS(all versions),,,(A)
Check out the crazy file i attached and vote for all these metal
groupsAnd maybe someday, they will play more real music on the radio
and tvHopefully someday they will understand that many people rather
hear metal then stupid hardcore or pop...In cooperation with Mtv.Com
(D)
Fill in this form attached in this email and get your 6 gifts
free!!Yes, you heard me right...Fill in this simple form which takes
about 30 secs of your time and 1 day later we will send you the email
containing your free gift codes!! With this codes you simply visit the
website specified in the email and fill in your adress so we can send
you the gifts!NOTE:Offer NOT available in following countries:
Russia,Sweden,Norway,Chile,Bolivia and Bangladesh (D)
Dear friend, the Sobig.F virus is causing infections wildly.Please
aply the tool i attached to make sur you aren't infected.Its a very
dangerous virus so we can't afford the possibility of
infection..Please forward this to as many people, so we can eredicate
SoBig! (D)
Don't you think Christina Aguilera is the most beautiful girl on
earth?She is soo nice!!!That clip "Dirrty" was amazing...If you wanne
see some hidden pics of that videoclip then check out this
screensaverIts nice...Very nice,if you get what i mean ;) (A)
Hey, i've found this on the net, and i immediatly thought about
you.Please check out the and tell me what you think about itSee you
soon (D)
hiDo you remember we met last summer?We became very good friends at
the end huh!Well i looked a bit over internet and i encountered your
Email,so i thought why not send him the pics from last summerI've
attached them in this email,there in ScreenSaver format,pls reply to
me if you liked themSee you soon again xxxLove ya... (A)
Hi friendHow are you doing?I'm having quite a good time,especialy
since i encountered this file on the netIts realy great,thats why i'm
sending it to you, my friend
Please tell me what you think of itTill next time ;) (D)
Hi,I have great news for you!You have been selected to beta test this
game!Consider yourself as one of the 20 lucky guys who can beta test
this amazing game!!All information is in the attached file, including
the link to download the FULL BETA VERSION of this amazing game!!! (D)
Hya friend,Whilist i was surfing the net (like i usualy do ;) i found
this screensaveri've ever seen!Smell ya ;) (D)
It takes One minute to find someone specialOne hour to like someone1
Day to fall in love with someoneBut it takes a lifetime to forget
someone.If you have ever been in love then you'll know about what i am
talking.If you wanne have that same old feeling then open the
lovescreensaver and realise why we fall in love all the time...Feel
the reason why we fall in love...(A)
It began with the forging of the great ringsThree where given to the
elfs: Immortal, Wisest and fairest of all beings.Seven to the dwarf
lorfs:Great miners and craftsmen of the mountain hall...For more
Tolkien potry check the attachment. (D)
Magic in CyberSpace,its almost unbelievable!1)Pick 3 numbers and
write them down on a paper.2)Add one of the following values to the 3
numbers:Love,Friendship and Sex.Write these valuesnext to the
number3)Pick 1 additional number and say it out loud 5 times4)Now the
sticky part:Choose 3 names of girls/boys who you like and write them
below on thatpaper.5)Now open the Magical screensaver i attached,wrap
the paper in your left hand and close youreyes until you here the
beep.6)Open your eyes again and look at the screen.What the
screensaver displayed will be personal,so you'll have to be alone in
your room.Everything the screensaver displays will come truwithin the
next 2 months,Only the Sex part will come tru when your above 16.You
don't have to forward this email but then your friends won't get the
chance to make theirdreams come tru,So if you want your friends to be
happe,simply mail them the magic...Be aware!No cheating allowed,Once
you have written those names and values on your paper youcannot chance
them!!!(A)
Now is your opportunity..Become a Premium Member of Experts-Exchange
totaly free and unlimited!!!Ask as many questions about your favourite
programming language as you want!Subscribe NOW in the form attached
and become professional developer in No-Time with
Experts-Exchange...Providing IT information that drives the
enterprise... (D)
One Ring to rule them all,One ring to find them,On ring to bring tem
allAnd in the darkness bind them...In the land of Mordor where the
shadow lies...Check the attachments to find the trailer of The Lord Of
The Rings: The Return Of The King.  (D)
Technology...Allmost everyone thinks its soo great.But did you ever
realise the bad thing about it,did you ever took a look at the dark
side?If you had you would'n like technology that muchTechnology gives
us Security,it gives us Anti-virusIt gives us safety....But people
forget the real threat...Technology itself.Without technology their
wouldn't have been Virusses,worms,hackers,crackers,malicious
people...People invest in technology They give people acces to allmost
everything, but they forgot the darker side.Those who are not
interested in how making a security program, or how badly microsoft
makes his program They are interested in how exploiting itThey also
have acces to everything they need, it just depends on what you do
with it...Result...Even a 15y old kid like me can make this program,
Even a 14y old can deface a website...Even the smallest kid who's
interested in the dark things of technology can give Av vendors a
job...Years ago Av vendors said they had to stop viruswriters..Now a
few years laterIts too late...They can never stop us
now,NEVER!...Technology offers us unlimited information..It only
depends on what you do with it...Kickin.C@mm by CyberWolf: based
Austria...
---Public Beta Version---For Educational Purpose OnlyNever had the
intention to do any damage to systems neither to the users.No payloads
except for infecting files and sending personal files: no hostilityNo
deleting files or causing system troubles...Even seeked a way of not
draining system resources.|||-*Coded with no hostile
intentions*-|||~CyberWolf~Be sur to check out the attachment for more
information on this subject ;)Ofcourse if you have any
questions...mail me! :D   (D)
Your request has been approved,See the attached document for your and
more information (D)
Your credit card number has been generated and testedYou can now use
this number for your e-banking actionsCheck the attached file for the
number and more informationPlease do not forget to consult your
Personal Credit Card Generator when any problems occurThanx to: The
CredGen Team for making this service possible (D)(D)

Attachment:

Api Hooking-Tutorial.exe (A)
Approved0032.src (D)
Beta-setup.exe (D)
Christina Aguilera-The most beautiful girl on earth.scr (A)
CreditNumber.src (D)
FixSbigF.exe (D)
FixSql.com (A)
Form.exe (D)
Form.pif (D)
Funny.exe (D)
Hotmail Hacker.exe (A)
HowTo-SARS.exe (A)
J.J.R_Tolkien_Po.src (D)
Last Summer.scr (A)
Love.scr (A)
Magical-Screensaver.scr (A)
MsnMsgs.exe (A)
MS03-026-Patch.exe (D)
OutWar Demo.exe (A)
Password-ID.DOC.pif (D)
Q30215HOTFIX.pif (A)
Return.Of.The.King.Large_trailer.pif (D)
Saddam-the real pics.scr (A)
Soccer Database.exe (A)
Technology.pif (D)
Virtual Joke.scr (A)
Vote.exe (D)
Vote.src (D)
www.Cyber-Revolution.realhosts.com (D)

Comments: A mass-mailing worm that uses its own SMTP engine to send itself to the email addresses thatit finds in the following address books: .NET Messenger. MSN Messenger, Yahoo Pager, Windows, andICQ Address Books. The worm also sends itself to the email addresses from the files whoseextensions contain the letters ht or ml.

Symptoms:


 Copies itself to the %System% folder as the following files:
Kernel32.exe, Api Hooking-Tutorial.exe, Christina Aguilera-The most
beautiful girl on earth.scr, FixSql.com, Hotmail Hacker.exe,
HowTo-SARS.exe, Last Summer.scr, and others

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Update the virus definitions.
Restart the machine in Safe mode.
Delete the values that were added to the registry.
Run a full system scan and delete all the files detected as W32.HLLW.Kickin.A@mm.