Warning: new worm/virus in the wild

Discussion in 'malware problems & news' started by Paul Wilders, Feb 27, 2002.

Thread Status:
Not open for further replies.
  1. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Although not named yet, a new virus (worm?) has been detected in the wild today.

    charasteristics:

    - comes as an attachment, named pics.exe
    - size 36 kb, packed
    - runs on Windows9x only
    - Windows has to be in C:
    - polymorphic
    - kills files
    - renames files

    Activating this one by opening the attachment will havoc your system.

    Updates regarding AVs should be on the way.

    regards.

    paul
     
  2. UNICRON

    UNICRON Technical Expert

    Joined:
    Feb 14, 2002
    Posts:
    1,935
    Location:
    Nanaimo BC Canada
    sounds like a newbie virus. win 9x only? no sysdir, only c:\windows\?

    who installs in c:\windows\ anymore?

    lol, this virus is like attemped murder. Come back when you kill somebody bub.
     
  3. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Quite so. Nevertheless, If I had to spend a dime for every attachment opened without any precaution in any way, It would cost me probably millions   :rolleyes:

    regards.

    paul
     
  4. UNICRON

    UNICRON Technical Expert

    Joined:
    Feb 14, 2002
    Posts:
    1,935
    Location:
    Nanaimo BC Canada
    you are correct, it still needs to be mentioned.

    or how else would we be able to ridicule the scipt kiddie who wrote the amaturish piece of sh!t? lol.
     
  5. Checkout

    Checkout Security Rhinoceros

    Joined:
    Feb 11, 2002
    Posts:
    1,226
    If it hasn't been named yet, can I call it Kevin?   :D
     
  6. UNICRON

    UNICRON Technical Expert

    Joined:
    Feb 14, 2002
    Posts:
    1,935
    Location:
    Nanaimo BC Canada
    I wanna call it... aw better not say.......
     
  7. javacool

    javacool BrightFort Moderator

    Joined:
    Feb 10, 2002
    Posts:
    3,995
    Quite amusing...

    Although, sadly, I know quite a few people who have Windows installed to c:\windows...  :rolleyes:
     
Loading...
Thread Status:
Not open for further replies.