IRC-Worm.Crack.a
Description IRC-Worm.Crack.a
This is a silly IRC worm spreading through IRC channels by using mIRC client. The worm itself is Win32 executable file about 3K of length (that is compressed executable file, being decompressed it gets about 10K of size).
When the worm file is run, it copies itself to Windows directory with CRACK.EXE name and affects mIRC client. The worm looks for mIRC client in two directories:
C:MIRCD:MIRC
While affecting the worm overwrites the SCRIPT.INI file with a set of commands that send the CRACK.EXE file (worm code) to users that join infected channel.
The SCRIPT.INI file on connecting to IRC server also joins "vxers" and "cservice" channels and sends the messages to there:
To "vxers":
I'm wide awake in my kitchen, it's dark and I'm lonely, oh if I could
only get some sleep.. Creeky noises make my skin creep. I need to get
some sleep.. I can't get no sleepall.
To "cservice":
PLEASE join #vxers, and visit http://www.shadowvx.com/4Q and
http://www.shadowvx.com/fun4vxers .. We're the best!
Check other viruses! Be aware! Use Antiviral Software
Akuku.649
Description Akuku.649
This is a not dangerous non-memory resident parasitic virus. On execution it searches for COM files and writes itself at the file ends.
The viruses display the messages:
A kuku frajerze !
Akuku.886
Description Akuku.886
This is a not dangerous non-memory resident parasitic virus. On execution it searches for COM and EXE files and writes itself at the file ends.
The viruses display the messages:
A kuku, Nastepny komornik !!!
|