I-Worm.Bagle.j
Description I-Worm.Bagle.j
This worm spreads via the Internet as an attachment to infected messages, and also via file sharing networks. It is packed using UPX; the size of the compressed file is 12843 bytes, and the size of the uncompressed file is 49707 bytes. The worm may write nonsense to the end of the file, in which case the size of the file will differ from the size shown above.
This current version is almost identical to I-Worm.Bagle.i, and differs only in the following insignificant ways:
The text of the message sent to the author of NetSky has been changed:
"Hey, NetSky, fuck off you bitch!"
The name of the file which the worm writes itself has been changed, and correspondingly, so has the value of the system registry key:
File name:
winsys.exe
Registry key:
[HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion/Run]
"ssate.exe" = "%system%winsys.exe"
Check other viruses! Be aware! Use Antiviral Software
DaBoys
Description DaBoys
It's a not dangerous memory resident boot virus. On loading from infected disk, it copies itself into interrupt vectors table and hooks INT 13h. Then it overwrites boot sectors of disks are accessed. It contains the internal text string: "DA'BOYS".
Dada.1356
Description Dada.1356
This is a non memory-resident harmless virus. It infects EXE-files by standard manner whenever they are loaded into the memory. At the end of infected files you can find the string in Russian: "yes,yesall" ("da,da..."). Periodically the screen flickers: all even lines are shifted cyclic to the left and all odd lines - to the right. The virus hooks INT 8, 21h.
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
|