Fandom

Malware Wiki

FriendGreetings

1,328pages on
this wiki
Add New Page
Comments0 Share


FriendGreeting is an e-card service that behaves similar to an email worm once installed, although it could also be seen as a PUP. Upon execution of the installer, the user will be asked to approve the associated certificate and accept the EULA. The EULA contains a clause that permits access to Outlook's notebook, which somewhat permits the subsequent worm-like spreading routine.

An email will be sent to all email addresses that can be retrieved from Outlok, with the following message.

Subject: %recipient% you have an E-Card from %sender%.
Message:
Greetings!
%sender% has sent you an E-Card — a virtual postcard from FriendGreetings.com. You can pickup your E-Card at the FriendGreetings.com by clicking on the link below.
http:(slash)(slash)www dot friendgreetings dot com(slash)pickup(slash)pickup dot aspx?

The program will also add the following registry key:

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]

“PMedia”=”C:Program FilesCommon FilesMediawinsrvc.exe”

SourcesEdit

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.