Troj/ServU-AZ is a hacked version of a commercial FTP server application.
By default, the Trojan runs an ftp server on port 43958.
When run Troj/ServU-AZ creates the following files:
These files may be deleted.
W32/Gatina-A is an email and network worm.
The emails sent by the worm have forged "From:" addresses and the following characteristics:
LYRICS OF BAMBOO AND OTHER BOY BAND
Philippines Government Top Secret
New Virus Information
Ukinnam Virus Information
Hi! Look the Attach Document for more details about FILIPINOS...
HOY! PINOY AKO! BUO AKING LOOB MAY AGIMAT AKO... FOR MORE LYRICS CHECK THE ATTACH FILE...
The Government of the Philippines revealed the truth. For more information please read the Attach file...
Please read the attach file for more information about computer virus...
If your computer has been infected by Ukinnam Virus. Open the attach file and follow the instruction to remove the virus..