Gokar

Gokar (W32/Gokar-A) je računalni crv kojeg je napisao Simon Vallor. Crv se širi pomoću Interneta tako što šalje sebe kao e-mail privitak adresama koje se nalaze u Microsoft Outlookovom adresaru.

Opis

Predmet (subject) e-maila koji crv šalje je slučajno izabran i može biti:

• "If I were God and didn't belive in myself would it be blasphemy"
• "The A-Team VS KnightRider ... who would win ?"
• "Just one kiss, will make it better. just one kiss, and we will be alright."
• "I can't help this longing, comfort me."
• "And I miss you most of all, my darling ..."
• "... When autumn leaves start to fall"
• "It's dark in here, you can feel it all around. The underground."
• "I will always be with you sometimes black sometimes white ..."
• "Darling, when did you fall..when it over ?"

Tekst e-mail poruke može sadržavati sljedeći sadržaj:

"Happy Birthday Yeah ok, so it's not yours it's mine :) still cause for a celebration though, check out the details I attached"

"Hey They say love is blind ... well, the attachment probably proves it. Pretty good either way though, isn't it ?"

"You should like this, it could have been made for you speak to you later"

Datoteka koja je privitak e-poruke može imati nastavak .BAT, .COM, .EXE, .SCR or .PIF.

Gokar u registry zaraženog računala doda ključ: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Karen = C:\<windows directory>\karen.exe kako bi se mogao pokrenuti tijekom podizanja sustava.