Description

This worm will be received as an e-mail attachment with the following message:

I'll try to reply as soon as possible.
Take a look to the attachment and send
me your opinion!
> Get your FREE P2000 now! <

The known attachment names are as follows:

billgt.exe
Card.exe
docs.exe
fun.exe
hamster.exe
humor.exe
images.exe
joke.exe
midsong.exe
news_doc.exe
pics.exe
PsPGame.exe
s3msong.exe
searchURL.exe
SETUP.EXE
tamagotxi.exe

When the attachment gets executed by the user, it will display the following dialog box:



The worm will then display the following error message dialog box:



The worm may display the following error message:




Payload

The worm spreads by responding to new unread messages in your mailbox, similar to other e-mail worms. It runs as a service in either Windows NT or 95/98, under the file name INETD.EXE.

If the current weekday is Wednesday and the current time is between 12:00AM and 2:00AM, the worm will attempt to display the following image in animated format:



Below the picture, the following text will appear:

Fight against the plage of inhumanity.
This is Plage 2000 coded by Bumblebee/29a._Plage 2000