W32/Magold-D – odpira CD enoto

W32/Magold-D is a memory resident worm that uses email, IRC channels, network shared drives and P2P network shares to spread.

The worm contains several randomly triggered payload routines such as opening the CD-ROM drive tray, changing the Windows colour scheme, restricting the movement of the mouse pointer to the lower part of the screen, opening the web page http://www.offspring.com, writing the text “=:-) OFFSPRING is coOL =:-) PUNK’S NOT DEAD =:-)” to the caption area of the topmost window and creating a large number of zero-byte text files on the Desktop.

Vir: Sophos