Virus Database

I-Worm.Req

Description I-Worm.Req

This worm spreads via e-mail by sending infected messages from affected computers. While spreading, the worm uses MS Outlook and sends itself to all addresses that are stored in the MS Outlook Address Book. As a result, an infected computer sends as many messages, as many addresses are kept in MS Outlook contacts list.
The worm arrives to a computer as an e-mail message with an attached VBS file that is the worm itself. The message in original worm version contains the following:
The Subject: requested info
Message body: Thank for your order and your confidence in us.
Attached file name: REQUESTED_INFO.DOC.vbs
Depending on your system settings, a real extension of the attached file (".vbs") may not be shown. In this case, the filename of the attached file is displayed as "REQUESTED_INFO.DOC".
Being activated by a user (by double clicking on the attached file), the worm checks the system for a data file of the Union Bank of Switzerland electronic payment software. If such a file is found, the worm sends it to three e-mails (to worm's author) and then exits.
In another case, if a file is not found, the worm runs its spreading routine: opens MS Outlook, gains access to the Address Book, obtains all the addresses from there and sends messages with an attached worm copy to all of them. The message subject, body and attached file name are the same as above.

Check other viruses! Be aware! Use Antiviral Software

Alex.818

Description Alex.818

This is a nonresident harmless virus. It infects EXE files in a standard way. The virus contains the text strings:
The Kite Virus (C) Alex Hacker *.EXE
The virus is not memory resident but copies small resident programs into the interrupt vector table. The first program erases text from screen by nice method some times after installation. The second program writes byte FEh to port 60h (?).

Alfa.3072

Description Alfa.3072

It is a dangerous(?) memory resident multipartite virus. While executing an infected file or loading from an infected floppy disk the virus infects the MBR of the hard drive. Then the virus hooks INT 13h, 21h and writes itself to the end of COM and EXE files that are executed. While accessing to floppy disks the virus infects the boot sector. Depending on its generation the virus may corrupt the CMOS.

Home