Virus Database

VCC.571

Description VCC.571

The viruses that were written with the VCC (Virus Creation Centre) virus constructor are relatively harmless, parasitic, non-memory resident and encrypted. They search for .COM files, and write themselves to the end of the file. The viruses contain the following text strings:
DEBUGGING IS VERY ILLEGAL (NOT!)
I-EAS Virus Creation Centre v0.19ß
[IE-VCC v0.19ß]

The virus displays the following messages:
Your System DNA is mutating!
sPeCiEs A Virus pANdEMiC
[sA] [HH]

Check other viruses! Be aware! Use Antiviral Software

I-Worm.Loding

Description I-Worm.Loding

This is an Internet worm written using VBS script language, and it is embedded into a Web-page on the Internet.
The worm infects the system when an infected web-page is opened with Internet Explorer 4+ (and if its security settings are not set to "HIGH").
The script sends a link to itself by email to all recipients listed in Microsoft Outlook Address Book attached to the following message:
Subject: "Computer Secrets !"
Message body:
If you are using Win9x/Me, visit the following page will upgrade your pc
performance. If you are not using Win9x/Me or don't want to upgrade your
pc, only forward this page to your friends.
Maybe your friends need it.
http://xxxxxxxxx.topcities.com/xxxxxxxxxxxxx
This URL points to the infected HTML page.
This worm uses a special way of replicating, because it sends only a link to itself in the message instead of sending the whole worm.

I-Worm.Logic

Description I-Worm.Logic

This is the first known Internet-worm in the Logo language that is widely used by schools worldwide. The worm itself is a LGP file, that is, a Logo Project File. It can be executed with special interpreter software like SuperLogo for Windows.
The worm doesn't spread by itself; rather it drops two different components:
a VBS file to spread through e-mail a la LoveLetter
an INI file to spread through IRC channels
It also drops a BAT file that writes a message on the screen during Windows startup. The message is:
You think Logo worms don't exist? Think again!
The worm creates a VBS file in a Windows startup folder, thus, it will be executed automatically upon the next Windows startup. The scripts in the VBS file create and send a message via Outlook to every entry in the address book. These messages have:
Subject: Hey friends!
Body: Hello! Look at my new SuperLogo program! Isn't it cool?
Attached file name: logic.lgp
An MIRC script in the worm's INI file is very short, and just sends the worm's LGP file to all users joining an infected channel.

Home