I-Worm.Spam.Brief
Description I-Worm.Spam.Brief
Spam.Brief is a worm virus spreading via the Internet as an attachment to infected emails. It is written in Visual Basic Script (VBS).
To send out messages the virus uses MS Outlook and sends messages to all addresses found in a victim machine's Outlook address book. The messages sent by the worm have the following subject:
here comes the subject
Message body text:
here comes the body
Attachment name:
virus.bat
Spreading
The virus spreads only when the file virus.bat appears in the root directory on drive C:. Thus the enclosed file will not work if the operating system tries to process it as a BAT-file.
Other versions
The virus is written in Visual Basic Script (VBS). To send out messages the virus uses MS Outlook to send infected messages to all addresses found in the Outlook address book. These messages sent by the trojan have the following subject:
Nice couple
Message body text:
They want to meet you. http://briefcase.yahoo.com/youngwifedawn
The message itself does not contain an attached copy of the trojan.
Check other viruses! Be aware! Use Antiviral Software
Qumak.1028
Description Qumak.1028
These are non memory resident enciphered parasitic viruses. They hit .COM-files of current directory and directories pointed in PATH string. Depending of current time they display: "Hello world from my virus!". They also contain the texts: "(C) DOCTOR QUMAK", "e stuff that should be here".
"Qumak.1161" formats the disk sectors.
"Qumak.1079" is a memory resident virus. It hooks INT 12h, 13h, 21h and infects the .COM-files on their execution or opening. It contains the encrypted text string:
The famous cooperation strikes again: IT IS DOCTOR QUMAK II!
Watch out for the next virus from Krak-w, Poland!
Quox.a
Description Quox.a
It is a harmless memory resident stealth boot virus. It hooks INT 13h and writes itself to the floppy disks boot sector and the MBR of the hard drive. It does not manifest itself in any way. The master copy of that virus contains the text:
_QUOX_
|