Threat Description

South Park

Details

Aliases:South Park
Category: Malware
Type:
Platform: W32

Summary



South Park is an e-mail chain letter which spreads itself in a German language e-mail message as an attachment called South Park.exe.This virus was found in May, 2000. It is not particularily widespread and it is believed that it will not be a big risk for the general public. This virus does not do anything directly destructive.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.



Technical Details



E-mails sent by the virus look like this:

From: name-of-the-infected-used
  To: random-name-from-outlook-address-book
  Subject: Servus Alter!
  Hier ist das Spiel, das du unbedingt wolltest!;-)
  Attachment: South Park.exe

Texts are German and mean: "Hi there! Here's the game you we're looking for!" The virus copies itself to a file called c:\winguard.exe and registers itself to run on each system start with this registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Windll=c:\winguard.exe

F-Secure does not have direct reports of South Park being in the wild.





Description Created: Mikko Hypponen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More