Know Your Malware: Appflet Removal

Appflet is a rapidly spreading Internet worm, which propagates by e-mail in messages with attached archives containing infected executables. Once the user unpacks and runs such a file, the parasite displays the following fake error message:

"error loading dll
The installation has failed to start because _agl43.dll was not found. Re-installing the application may fix this problem."

and installs itself to the system. Then it starts a spreading routine. Appflet uses own mail engine to send letters with the following subject and body:

"Actors Sexy Pictures! (Axe Sexye Bazigarhaye Cinema)"
"Hi my friend. This is a funny sexy actors pictures. Enjoy it!!"

The worm automatically runs on every Windows startup. It does not carry any destructive payload.

Related files: installgallery.exe, syspw32.exe, winpw32.exe,

Appflet properties:
Hides from the user
Stays resident in background Remove Appflet, removal instructions

Linked by shanmuga Thursday, 10th November 2005 9:40PM