Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It obtains data from infected computers. It modifies the Windows Registry and changes the Internet Explorer browser’s home page.|
|First detected on:||Aug. 31, 2001|
|Detection updated on:||Sept. 12, 2002|
Cuerpo is a worm that reaches computers in a file attached to an e-mail message with variable characteristics, which makes it more difficult to recognize.
Cuerpo is a dangerous worm as it obtains data from infected computers. It also modifies the Windows Registry and changes the Internet Explorer browser’s home page to http://www.freedonation.com.
It is easy to get infected with Cuerpo, as the sender of the e-mail that carries it is known to the targeted user and it activates automatically upon viewing the message.
Cuerpo spreads extremely rapidly, by sending itself out to all the contacts found in the Address Book of e-mail programs such as Outlook and Netscape Communicator.
A clear indication that you have received Cuerpo, is an e-mail message with the following characteristics:
Subject: the same as the attached file.
Attachments: The virus names the attached file after any of the attachments included in any of the messages received in the affected computer. To this name, the worm adds the text: (9 Kbytes).VBS.
However, if the worm cannot find any messages with attached files, the name of the file that Cuerpo mails out will consist of a series of random characters plus the TXT extension.
In order to obtain more Information about the characteristics of the e-mail message, consult the Means of transmission section.