Virus Database

Abraxas_II.2011

Description Abraxas_II.2011

This is not memory resident parasitic virus. It searches for COM files and writes itself at their ends. It draws porno picture and displays the message:
Ich bin ein Geschenk von dem Teufel
It erases C: drive sectors.

Check other viruses! Be aware! Use Antiviral Software

I-Worm.Loding

Description I-Worm.Loding

This is an Internet worm written using VBS script language, and it is embedded into a Web-page on the Internet.
The worm infects the system when an infected web-page is opened with Internet Explorer 4+ (and if its security settings are not set to "HIGH").
The script sends a link to itself by email to all recipients listed in Microsoft Outlook Address Book attached to the following message:
Subject: "Computer Secrets !"
Message body:
If you are using Win9x/Me, visit the following page will upgrade your pc
performance. If you are not using Win9x/Me or don't want to upgrade your
pc, only forward this page to your friends.
Maybe your friends need it.
http://xxxxxxxxx.topcities.com/xxxxxxxxxxxxx
This URL points to the infected HTML page.
This worm uses a special way of replicating, because it sends only a link to itself in the message instead of sending the whole worm.

I-Worm.Logic

Description I-Worm.Logic

This is the first known Internet-worm in the Logo language that is widely used by schools worldwide. The worm itself is a LGP file, that is, a Logo Project File. It can be executed with special interpreter software like SuperLogo for Windows.
The worm doesn't spread by itself; rather it drops two different components:
a VBS file to spread through e-mail a la LoveLetter
an INI file to spread through IRC channels
It also drops a BAT file that writes a message on the screen during Windows startup. The message is:
You think Logo worms don't exist? Think again!
The worm creates a VBS file in a Windows startup folder, thus, it will be executed automatically upon the next Windows startup. The scripts in the VBS file create and send a message via Outlook to every entry in the address book. These messages have:
Subject: Hey friends!
Body: Hello! Look at my new SuperLogo program! Isn't it cool?
Attached file name: logic.lgp
An MIRC script in the worm's INI file is very short, and just sends the worm's LGP file to all users joining an infected channel.

Home