Unkempt.1342
Description Unkempt.1342
It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed or opened. When a file is created, the virus checks the filename extension with the list:
DOC TXT PAS C H PRG TEX COB FOR MOD LIS CLA PRO DBF
and saves the file's handle. While writing to these newly created files the virus depending on its counter replaces the random selected characters according to the strings:
szzsa?e¡i¢o£ugjEeAaIiUuOoyikcck1223344556677889
<>><= '":=&|!~/*+--+*/^/{ 12233445566778899104}
The odd characters are replaced with the even ones: 's' -> 'z', '<' -> '>'.
The virus also contains the text strings:
com
riS
Check other viruses! Be aware! Use Antiviral Software
Email-Worm.Win32.Doombot.b
Description Email-Worm.Win32.Doombot.b
This worm spreads via the Internet as an attachment to infected messages. It sends itself to addresses harvested from the victim machine. The worm itself is a Windows PE EXE file 27480 bytes in size. The worm contains a backdoor which receives commands via IRC channels. Installation Onceall
Email-Worm.Win32.Locksky.k
Description Email-Worm.Win32.Locksky.k
This worm spreads via the Internet as an attachment to infected messages. It sends itself to email addresses harvested from the victim machine. The worm itself is a PE EXE file 30373 bytes in size. Installation Once launched, the worm copies itself to the Windows system directory as "all
|