x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Zoek

Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Zoek
Technical name:W32/Zoek
Threat level:Low
Type:Worm
Effects:  

It drops a Trojan in the affected computer and displays an image on screen. Is spreads via e-mail.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

Detection updated on:June 13, 2007
StatisticsNo

Brief Description 

    

Zoek is a worm that reaches the computer in an e-mail message with the subject Maxima Screensaver!.

The e-mail message in which Zoek reaches computers includes a text that tries to trick users into visiting an specific website, where they will be able to download a screensaver. However, when users visit this website they will be downloading the worm.

Once Zoek is run, it displays a window on screen, which prompts users to restart the computer. Then, Zoek drops the Trojan Bck/Orifice2K which opens the TCP port 33530, making the computer vulnerable to other attacks.

Visible Symptoms 

    

Zoek is verys easy to recognize, as it reaches the computer in an e-mail message with the following characteristics:

  • Subject:
    Maxima Screensaver!
  • Message:
    http:// home.(blocked).nl/ kees.tittel/ screenmaxima.scr
    This website does no longer exist.
  • Attachments: It does not contain any attachments.

When Zoek is run, the following window prompting users to restart the computer is displayed on screen: