VBS/PeachyPDF Worm

 Information about the VBS/PeachyPDF worm:

VBS/PeachyPDF is a mass mailing email worm. This spreads under Windows environment. Infected mail arrives with one of the following subjects:

You have one minute to find the peach
Find the peach
Find
Peach

and body of the mail contains any one of the following contents:

Try finding the peach
Try this
Interesting search
I don't usually send this things, but...

The worm carries an attachment with PDF extension, which will be any one of the following names:

find.pdf
peach.pdf
find the peach.pdf
find_the_peach.pdf
joke.pdf
search.pdf

Opening the attachment will display a document with a title You have one minute to find the peach. This will be displayed if Adobe Acrobat is installed in the system. If full version of Adobe Acrobat is installed, then double clicking on the displayed Icon can exeucte the worm. The extension of the worm will be vbs, vbe or wsf. The executed VB script tries to drop a JPG file under windows TEMP folder and execute. Later on it checks for the following registry key:

HKEY_LOCAL_MACHINE\Software\OUTLOOK.PDFWorm\

If this key is not there then it creates the same. After this using BCC: field, it sends infected attachment to first 100 email addresses found under MSOutlook mail boxes and address book.It may not become a wide spread threat as it requires full version of Adobe Acrobat. It cannot spread using Adobe Acrobat Reader.

This worm first appeared during August 2001.

 Other names of VBS/PeachyPDF worm:

This worm is also known as OUTLOOK.PDFWorm, VBS.PDFWorm.A, VBS.PeachyPDF@mm.

 Variants of VBS/PeachyPDF worm:

VBS/PeachyPDF-B, VBS/PeachyPDF-C, VBS/PeachyPDF-A.

 Removing VBS/PeachyPDF worm from your computer:

You can remove this worm from your computer by using Protector Plus antivirus software.