The virus authors want to do every way so that computer viruses are more likely to meet the current hot topics, so there is of course not going through atypical pneumonia SARS.
Before the spread of worm, there will be a window display next to the next window.
In addition, the current home page will be changed to the SARS page of the World Health Organization.
http://www.who.int/csr/don/2003_04_19/en
"Coronex" worm uses the address of the WAB and then connects directly to the SMTP server. Each hour is distributed at XX: 01: 01.
"from" and "to" domain, the body and the attachment name may be
'SARS@hotmail.com'
SARS
Severe Acute Respiratory Syndrome
Sars.exe
'Sars2@hotmail.com'
I Need your help
Severe Acute Respiratory Syndrome
Corona.exe
'Corona@hotmail.com'
Virus alert!
SARS Virus
Virus.exe
'virus@yahoo.com'
Corona Virus
Honk Kong
Hongkong.exe
'Deaths@china.com'
BYE
Deaths Virus
Deaths.exe
'virus@china.com'
SARS
See Ya
Sars2.exe
'virus2@china.com'
SARS Virus
Sars Corona Virus
Cv.exe
