• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

My AntiSpyware

Your Go-To Destination for Scam Awareness, Malware Removal, Antispyware Downloads, and Expert Guidance

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools
Home › Worms › Banwarum Worm Offers Tickets for the WORLD CUP

Banwarum Worm Offers Tickets for the WORLD CUP

Myantispyware team May 28, 2006     No Comment    

The new mass mailing worm called Banwarum (also known as Zasran and Ranchneg) that is using World Cup themed email messages. The worm sends itself as a password protected archive and includes in the email the password for it. The emails sent by the worm are in German and some of them offer tickets for the football games in Germany next month.

There are already three functionally similar variants of this worm. FSAV detects .A and .B variants of the worm with update version number 2006-05-24_04 and variant .C with update version number 2006-05-25_01. One of the emails sent by the worm looks as follow:

Hi man,

ich hab gesehen, das du zu WM wolltest, frag nicht wer ich bin und warum ich es mache. Hier hast du 5 Stueck, das ist eine spezielle Online Version, drueck es aus und unterschreib. Password zu dem Archiv lautet (psw)

Mfg Niemand 😉

This means in English:

Hi man,

I saw that you want to go to the World Cup. Don’t ask who am I and why I am doing this. Here you have 5 pieces, which are a special on-line version, print it and sign. Password to the archive is (psw).

With friendly greetings Nobody 😉

Thanks to F-Secure.

Worms

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

Leave a Reply Cancel reply




New Guides

Thecharmcove.com Charm Cove
Thecharmcove.com Review: A Detailed Look into a ‘The Charm Cove’ Jewelry Scam Store
Bestkinitclub.com click allow scam
Bestkinitclub.com Virus Removal Guide
Bakcleacn.com Macys backstage clearance scam
Bakcleacn.com Review: 5 Red Flags in Fake Macy’s Clearance Scam
YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED Email Scam: What to Do if You’re Targeted
Gravityglidersco.com Gravity Glider ads
Gravityglidersco.com Review: 6 Clear Signs of a Deceptive Online Store

Follow Us

Search

Useful Guides

ads by adware
How to remove Adware from Windows 10 (Virus removal guide)
Tech Support Scam
Remove Tech Support Scam pop-up virus [Microsoft & Apple Scam]
Malwarebytes won’t install, run or update – How to fix it
browser redirect virus
How to remove Browser redirect virus [Chrome, Firefox, IE, Edge]
How to remove browser hijacker virus (Chrome, Firefox, IE, Edge)

Recent Posts

Yahoo IM worm hijacks Internet Explorer Installs fake browser
Kaspersky lab released detection for malware exploiting the MS Word vulnerability
I just go to Amazon and Citibank, so why am I seeing pop-ups for Adult Friend Finder?
Good tool for manage your HOSTS file
How to remove guardupdate.com, startupguarduptodate.com, guarduptodate.com homepage hijackers

MYANTISPYWARE.COM

  • About Us
  • Contact Us
  • Privacy Policy

NEED A HELP ?

If you're seeing unwanted pop-ups or ads in your web-browser, you might have an adware installed on your computer. Use the following guide to stop pop-up ads and remove malicious software. Or ask for help here.

Links

  • Downloads
  • Instructions
  • Questions and Answers
  • Free Malware Removal Tools
Copyright © 2004 - 2023 MASW - Myantispyware.com.