Trojan-Downloader.Win32.Tibser.c
Description Trojan-Downloader.Win32.Tibser.c
This Trojan program is approximately 25KB in size, and packed using FSG. It copies itself to the system directory as tibs*.exe. It adds this file to the system registry key [HKLM/Software/Microsoft/CurrentVersion/Run] It will install Trojan-Proxy.Win32.Sobit, another malicious program, on theall
Check other viruses! Be aware! Use Antiviral Software
Helga.666.a
Description Helga.666.a
These are dangerous nonmemory resident encrypted parasitic viruses. They search for COM files, then write themselves to the end of the file. Then the viruses delete the files by using the masks:
*._* *.ms
Depending on the system time the viruses display the messages and halt the computer. "Helga.666.a" displays the message in Russian. "Helga.666.b" displays:
WARNING: ALL DATA ON NON-REMOVABLE DISK
DRIVE C: WILL BE LOST!
Proced with Format (Y/N)?y
The viruses also contain the string:
*.com
"Helga.666.a" also contains the word:
Helga
Helicopter.777.a
Description Helicopter.777.a
It is not a dangerous memory resident parasitic virus. It hooks INT 10h, 21h and infects .COM files that are executed. While infecting the virus search for zero bytes are in the file body, and writes itself to there. If there is no such are, the virus does not infect the file. The file length does not grow while infecting.
When the video mode is changed to graphic mode 5 (INT 10h, AX=0005h), the virus draws an image of helicopter.
|