Home Malware Programs Worms Jalabed

Jalabed

Posted: March 28, 2006

Jalabed is a dangerous Internet worm that spreads by e-mail via messages with infected attachments and through chat networks using the mIRC chat application. The user can accidentally infect a PC by running malicious files attached to malicious e-mails or received from other chat users.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 arabicstrip.wma.exe
    2 fuckfuckfuck.mpg.exe
    3 fuckmovie.wma.exe
    4 hotmovie.wma.exe
    5 mailit.vbs
    6 misslebanon.jpg.exe
    7 myfirstsex.wma.exe
    8 nancyajram.exe
    9 security.vbs
    10 sexcaptured.jpg.exe
    11 sexmovie.mpg.exe
    12 sexyarabicgirl.jpg.exe
    13 sexyhaifa.jpg.exe
    14 sexylebanesegirl.jpg.exe
    15 sexynancy.jpg.exe
    16 stolensexvideo.wma.exe
    17 windowsscreen.vbs

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoDrives=67108863HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoRun=1HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools=1HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoAdminPage=1HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesWinOldAppDisabled=1HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunYaSalam
Loading...