Home / malwarePDF  

Worm:Win32/Dorkbot.AK


First posted on 08 November 2012.
Source: Microsoft

Aliases :

Worm:Win32/Dorkbot.AK is also known as Trojan.Win32.Yakes.bfxb (Kaspersky), Worm/Rodpicom.A (Avira), Gen:Variant.Barys.7649 (BitDefender), Trojan.Spamlink.1 (Dr.Web), Win32/Rodpicom.A worm (ESET), W32/Rodpicom-B (Sophos), W32.Phopifas (Symantec), WORM_DORKBOT.IF (Trend Micro).

Explanation :



Worm:Win32/Dorkbot.AK is a worm that spreads Worm:Win32/Dorkbot.I over Skype and Windows Live Messenger.

Spreads via...

Worm:Win32/Dorkbot.AK checks to see what language you're using in your computer. Depending on the language, it sends out a localized message to all your Skype and Windows Live Messenger contacts, such as the following:

  • eínai aftí i néa fotografía profíl sas?
  • hei er dette din nye profil bilde?
  • hei zhè shì ni de gèrén zilià o zhà opià n ma?
  • hej detta är din nya profilbild?
  • hej er det din nye profil billede?
  • hej je to tvuj nový obrázek profilu?
  • hej je to vasa nova slika profila?
  • hej jeli ovo vasa nova profil skila?
  • hej to jest twój nowy obraz profil?
  • hey bu yeni profil pic?
  • hey c'est votre nouvelle photo de profil?
  • hey ini foto profil?
  • hey is dit je nieuwe profielfoto?
  • hey ito sa iyong larawan sa profile?
  • hey là anh tieu cua ban?
  • hey è la tua immagine del profilo nuovo?
  • hey é essa sua foto de perfil? Rsrsrsrsrsrsrs
  • hoi schöni fotis hesch du uf dim profil öppe nöd?
  • hé ez az új profil kép?
  • lol is this your new profile pic?
  • moin, kaum zu glauben was für schöne fotos von dir auf deinem profil
  • ni phaph porfil khxng khun?
  • on tämä uusi profiilikuva?
  • sa k'vo profili lusankary
  • tas ir jusu jauna profila bildes?
  • tung, cka paske lyp ti nket fotografi?
  • ¿aquesta és la teva nova foto de perfil?
  • ¿hey esta es tu nueva foto de perfil?


Included in the message is a link to a file, for example:

  • goo.gl/Ya6Se?image=<your user name>
  • goo.gl/cipRN?foto=<your user name>


The file may be detected as Worm:Win32/Dorkbot.I.



Analysis by Stefan Sellmer

Last update 08 November 2012

 

TOP

Malware :

Family: