A2K.Damcor

Discovered:
    May 18, 2004
Updated:
    February 13, 2007 12:23:23 PM
Type:
    Worm
Systems Affected:
    Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When A2k.Damcor is executed, it performs the following actions:

    Launches Microsoft Access in order to execute the Macro code.

    Attempts to use Microsoft Outlook to email itself to all contacts in the address book.

    The email has the following characteristics:

    Subject: Re: Saddam Corrupted
    Body: Please find the details of Saddam Corrupted  
    Attachment: account.mdb

    Length: Unknown

Technically A2K.Damcor is a worm, a type of malware that replicates and circulates without human intervention. A2K.Damcor can replicate and spread not only inside of your computer, but also to other computers connected to your network.

What makes worms like A2K.Damcor extremely dangerous is its ability to spread quickly. A A2K.Damcor infection hits very fast; so quickly that you won’t even be aware that it was A2K.Damcor that infected your computer.

When A2K.Damcor infects your computer, it tries to create a copy of itself as a Windows executable file (.EXE). After infecting you computer, A2K.Damcor will attempt to use your network to connect with its source computer. The primary intention is to update itself and download other malware programs and files.

A2K.Damcor also attempts to infect the Windows Registry of your computer. The purpose is to remain undetectable, protect other malicious programs it downloads, start up when the computer boots, and ultimately take full control over your computer.