W32.Suconelo - Hacking

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Suconelo

Sender:

Varies.  Usually someone you know.

Subject:

Alertas de virus!!
Consuelo Pics
Fotos de Consuelo
Fwd: Horoscopo
Fwd: Love Test
Hackear hotmail
Hacker Tutorials
Hackers Tutorials
Hacking hotmail
Kaspersky AVP Patches
McAfee VirusScan Patches
Norton New Patches
Parches para kaspersky AVP
Parches para McAfee VirusScan 2003
Parches para Norton 2003
Re: El archivo...
Re: The File Please
Safety
This Pics are only for you ;
Virus Alert!!

Message:

Aquí está el archivo por el que pregunaste ;-)
Check this consuelo pics, only for you, see the attachment
Check This pics!!!
for your PC, now, then can enter to our machines just by clicking in
Haktek and putting our IP, so, i sent you a Firewall 'cause I wanna
Protect you!
Hey!!! There are new hacking tutorials by hacking hotmail :D Have
fun!
Hi, I sent you Hacker tutorials by hacking the bad person who causes
bad to you...
Hi, this is a file that you can access to another machine without his
or her permission. Have Fun!!!
Hola!!!, por ahí dicen que hay alertas para el virus DeathLetter, así
que ejecuta estos parches para que no seas infectado :)
Hola, te envío la lista de los nuevos virus, espero que no seas
afectado!!! van adjuntos los mensajes de los virus y los nombres de
archivos...
Love test is in this file, Have Fun!
New Virus Alert!!! Be Care With VBS/DeathLetter, in the atachment i
send you an antivirus, by accepting, you'll be protected :)
Open this New patches of Kaspersky AVP for Windows 9x/Me/2000/NT/XP
be care with VBS/DeathLetter, this is an ilegal patch, but don't
worry. We distributed this with kaspersky permission, so don't worry
;)
Open this New patches of McAfee for Windows 9x/Me/2000/NT/XP be care
with VBS/DeathLetter, this is an ilegal patch, but don't worry. We
distributed this with McAfee permission, so don't worry ;)
Open this New patches of Norton for Windows 9x/Me/2000/NT/XP be care
with VBS/DeathLetter, this is an ilegal patch, but don't worry. We
distributed this with Symantec permission, so don't worry ;)
Que onda... te envío estos tutoriales para que aprendas a hackear a
los que te caen mal y están en hotmail. Diviertete!!!
The horoscopo Test is in this file, have Fun!
This is the file you ask for...
ve las fotos de Consuelo, son solo para tí!!! ;)

Attachment:

Consuelo_pics
Firewall consuelo_pics_installer
Fotos_de_consuelo list.txt
Hackeando
Hacking
Hacking_hotmail.txt
Horoscopo
Lovetest
Parche_seguridad_iexplorer
Parches
Patch
Protector
Tutorials

Comments: A worm that send itself to the email addresses in the Microsoft Outlook address book.

Symptoms:


 Creates the folder, SSystem%Suconelo. 
 Create the file, %SystemConsuelo.txt, which contains this text:
"Consuelo I just wanna that you know the truth I just... just... love
you. It's all that i can say... Bye baby, Consuelo don't forget it...
I love you..." 
 If the registry key: HKEY_LOCAL_MACHINESoftwareSuconeloMailed
contains the value 1, the following message is displayed: "Hi, You're
(offensive word) by Nincubus/ViriiZone!!! Don't be fooled or
(offensive word), be care!!! Suconelo" - if that key and value do not
exist, the worm creates a random email, and sends itself to all the
addresses in the Microsoft Outlook Address Book. Then, it sets the
registry key to "1".

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Update the virus definitions.
Run a full system scan and delete all the files detected as VBS.Suconelo.