WORM_ZAR.A

[Mobo]

WORM_ZAR.A propagates via email using its own Messaging Application Programming Interface (MAPI) engine. It uses email addresses gathered from Microsoft Outlook as its recepients.

A summary of the sent email's content is as follows:

Subject:
Tsunami Donation! Please help!

Body:
Please help us with your donation and view the attachment below! We need you!

Attachment:
tsunami.exe

This worm also has the ability to perform a distributed denial of service attack on the Web site www.hacksector.de.

This Visual Basic-compiled worm runs on all Windows platforms (95, 98, ME, NT, 2000, and XP).