Virus Database

Backdoor.Throd.a

Description Backdoor.Throd.a

Throd is a Trojan that allows a 'master' to use the zombie machine as a proxy server. Throd is written in Delphi for Windows, is about 23 KB in size (about 80 KB unpacked)and comes packed by UPX.
Installation
The Trojan copies itself in the Windows system folder under a randomly combined multi-partite name:
ms
svc
win

16
32
64

mes
prn
reg
"ms16prn.exe", for example.
In order to auto-launch, the Trojan creates a key in the system registry:
[HKCUSoftwareMicrosoftWindowsCurrentVersionRun]
with one of the following names chosen at random:
MS Driver Management
Synchronization Messager
System Directory Service
System Service Control
Windows Messaging System
Throd then attempts to connect to several remote servers and onpass ID information, including IP address and so forth, to the virus coder.
Throd accepts commands from the remote 'master' collets email addresses from the MS Outlook address book in to the mseml.dll file and uses an http commands to send them to the same remote sites.
Throd can install and launch random files on command.
Throd also works as a proxy server and is capable of accepting and sending any type of data.

Check other viruses! Be aware! Use Antiviral Software

Hmyr.1800

Description Hmyr.1800

It is a not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and on selecting a new directory searches for .COM and .EXE files and writes itself to the end of the file. On January 1st, February 23rd, March 8th, April 1st, May 1st, June 12th, and Fridays that falls on 13th the virus creates in directories files with name in Cyrillic - this name is pronounced like "Hmyr".

HNY.690

Description HNY.690

It is not a dangerous nonmemory resident parasitic virus. It searches for EXE files, then writes itself to the beginning of the file. The original host file header is encrypted and saved to the file end. To return control to the host program the virus disinfects and executes it. Depending on files that are infected the virus decrypts and displays the message:
Happy New Year!

Home