McAfee for Small Businesses

・W32/Holar.r@MMは、定義ファイル4300以降を使用するとW32/Holar.gen@MMとして検出されます。定義ファイル4323では、W32/Holar.r@MMとして検出されるようになります。

・W32/Holar.r@MMは、以下のような3つのファイルによるサンドイッチ状の構造をしています。

ドロッパコンポーネント|繁殖コンポーネント|SMTPライブラリ

• 繁殖コンポーネント：29,183バイト
• SMTPライブラリ：25,736バイト
• ドロッパコンポーネント：67,934バイト

・ドロッパコンポーネントは、他のコンポーネントをドロップ（作成）して、実行します。以下のアイコンとファイルプロパティ情報を使用して、ZIPファイルを装います。

File version: 13.0.0.0
Description: WinZip Executable
Copyright: Copyright (c) WinZip Computing, Inc. 1991-2000 - All Rights Reserved
Comments: StringFileInfo: U.S. English
Company Name: WinZip Computing, Inc.
Internal Name: WINZIP32.EXE
Language: English (United States)
Legal Trademarks: WinZip is a registered trademark of WinZip Computing, Inc
Original Filename: WINZIP32.EXE
Product Name: WinZip
Product Version: 8.0  (3105)
WZ32.DLL: 13,999
WZINET32.DLL: 3,999
WZINFO.DLL: 1,999

・W32/Holar.r@MMが実行されると、以下の偽のエラーメッセージを表示します。

・繁殖コンポーネントの文字列から、W32/Holar.r@MMは、以下のリストから選択した件名と本文のメッセージで届くと考えられます。

• （ローカルシステムから取得したファイル名）
• （空白）
• Fw: 
• Re: 
• hey
  Check this out ;)
• Hey I thought you trusted me but ... 
  i haven't ever thought i should send u my briefcase to gain ur Trust .
  Have it all :) bye
• Hey Wussap?
  Here is the Emmy ;) Dont tell Sam abt it
  Cya
• Another one?
• Heyyyy
  I lost the other email , anyway i sent u all u need
• i have just got it , plz tell me if u need more.
  bye
• Heyyyyyyyy Lola Wussaaap??
  I forgot to tell u , the other file is with Sam:) bye
• YO DUMP , IM SICK OF UR EMAILS , IF U LOSE IT AGAIN I WONT GIVE IT TO U, SAVE IT
  BYEEE
• Hey wussap?
  i lost Sara's Email plzz send this file to her :)
  and tell her i can't be online tonight
  Bye
• heyyy
  I can't be online tonight :(
  anyway , i sent u something u r gonna love ;)
  cya tomorrow
• Hi
  i just wanted to say sorry for last night
  and .. i wish u accept this as an apology
  bye dear
• elegant ppl should satisfy thier taste with elegant things ;)
  Wait for more :)
• I've got your email , but you forgot to upload the attachments.
  Don't be selfish , i sent you all the files i have, send me anything :(
• heyyyy i tried many times to send u this email but ur account was out of storage as i think
  any way , make sure that i didn't and i won't forget u :)
  Cya Forgotten :P
• i thing the subject is enough to describe the attached file !
  check it out and replay your opinion
• Hiiiiiii
  i've got this surprise from a friend :)
  it really deserves a few minutes of your time.
• Never mind !
• Attatchments
• See the attatched file
• you seem to be mad @ me coz i didn't send u anything for along time,
  i didn't forget u , but i was kinda busy , i've got all of ur emails
  thanx :) and i hope u accept this one as an apology.
• gift :)
• Surprise!
• i'm fine , thanx for asking :) 
  and thanx for the nice attachements.
  but unfortunately, i don't remember you
  i will be waiting for u emaill to remind me of your self.
  Hummm , i hope u accept this show as an apology.
• save it for hard times
• Happy Times :)
• Useful
• Very funny
• hey wuts up?
• i found this amazing file in my Recycled , i know u love this kind of things ;)
  cyaaa
• you have to see this!
• amazing!