IRC-Worm.Edoc
Description IRC-Worm.Edoc
This is a simple network worm that replicates in IRC channels. The worm sends the following message to all channel users, except channel operators, that connect to the channel where an infected user is connected:
hey to get OPs use this hack in the chan but SHH!
//$decode(d3JpdGall.........................................................
............................................................................
............................................................................
............................................................................
...................SkgLG0p,m) | $decode( Lmxv........IMQ= ,m)
(dots are placed instead of the virus)
This message contains a line starting from "//", which is a script command and contains the worm's body, encoded with MIME base64 encoding.
If a user receiving the infected message starts the script, the worm creates a file that is then distributed through IRC channels, and adds a link to the infected file in the "mirc.ini" file.
Check other viruses! Be aware! Use Antiviral Software
Macro.Word97.Unhas
Description Macro.Word97.Unhas
This is a slightly modified "Macro.Word.Unhas" virus upconverted from Word 6.0 to Word97 format. It contains three identical macros with the names AutoOpen, JJAB, JJAO. The virus replicates itself upon document opening (AutoOpen). It displays the MessageBox:
Virus World created (c) 1996 by Ahmad Zakhri
Macro.Word97.Unhelp
Description Macro.Word97.Unhelp
This virus contains four macros in one module "Helper": AutoOpen, ViewVBCode, FileTemplates, ToolsMacro (stealth). It replicates upon document opening. While infecting, the virus uses export/import functions via the C:STARTUP.LOG file. The virus does not manifest itself in any way.
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
Berufsunfaehigkeitsversicherung
Chicago Storage Units
Hair Extensions
Persson, Jan
Utas Ekoteknik Ab
|