Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Interesting Snowflake Worm:Win32/SnowFlake.A

17 Jun 2011   #1
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
Interesting Snowflake Worm:Win32/SnowFlake.A

There's a WinRAR file floating around in the Internet named "2012桌面雪花.rar"* (SHA1: 889cf7076d4c08637e8aeedf7a90dc4a3808f991), which can be downloaded or may be sent out as an attachment in an email message, that contains a program that claims to display beautiful snowflakes on your desktop. If you run the executable contained in the archive (file name "桌面雪花.exe" - SHA1: 7255f61cada0815bc0fa2fb12f5b3c89db7e786d), it does what it claims.

It is beautiful, right?

But wait, non-beautiful things are happening behind the scenes. As you can guess, it is malicious, and so it is interesting to me.

A Guy

My System SpecsSystem Spec


 Interesting Snowflake Worm:Win32/SnowFlake.A

Thread Tools

Similar help and support threads
Thread Forum
No sound from Blue Snowflake USB mic
I am having some trouble and I was hoping someone here might be able to help me. I cannot get any sound from my USB microphone. I have done some researching before deciding to post on this forum and it has not resolved my problems. I will attach some screenshots of what I have already tried. ...
Sound & Audio
Category: Worm Description: This program is dangerous and self-propagates over a network connection. Recommended action: Remove this software immediately. Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that...
System Security
Win32/Blaster Worm Affected !!
Hi system is Win 7 32 bit Ultimate edition.. A new virus? named Win32/BlasterWorm is affecti my laptop now since the past 3 days... I am not able to open any Files or Flders nor open Ie nor firefox..i had avg home edition installed n y laptop but whenever i try it open it the...
System Security
MSE Worm:Win32/Ainslot32.A
Mse Keeps giving me an alert on this worm. I have deleted and quarantined it but shows up on each reboot. Ithink it is some how connected to this C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe as after deleting or quarantine MSE wants to send this for asessment to detemine if it is...
System Security
Got a win32 blaster worm and can't get rid of it?
Microsoft essentials didn't detect it, maleware bytes didn't detect it. I can't open any programs, the option to open or install as administrator is NOT THERE. I used ESET online scanner it detected the two worms and "said" it cleaned them. And I just found out win 7 deletes all my restore points....
System Security
Create Your Own Snowflake
I had fun Popular Front Snowdays
Chillout Room

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 13:14.

Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App