|
Win95.Spawn.4096. Viruses Information
| Name: |
Win95.Spawn.4096. |
| Category: |
Viruses |
| Description:
|
Details
Win95.Spawn.4096.a
This is a companion Win95 virus. The virus itself is the EXE file for Win95 (PE EXE). It searches for .EXE files in the current directory (any .EXE files - DOS, Windows, Win95,all), renames it with .COM extension and writes itself to disk with the name of infected file and .EXE extension. In short, the virus saves the original file in .COM file and replaces it with its code.
After infecting four files the virus changes the ComputerName and the label of the current disk to "Murkry". There also is a code that displays the MessageBox, but that code is never called:
Spawn95
Either 4 or all files in this directory
are infected!!!
'Making computers more interesting
Through the creation of `tronic life'
Murkry/1997 Murkry
The virus also contains the strings:
KERNEL32.dll
USER32.dll
CopyFileA
ExitProcess
FindFirstFileA
CreateProcessA
GetCommandLineA
SetComputerNameA
SetVolumeLabelA
lstrcpyA
FindNextFileA
MessageBoxA |
Top Viruses Visited Pages:
Invader. - 241 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 67 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
Backdoor.BO.
Albanian.199
Rasek.149
Wilbur.512.
AWVCK.18
Macro.Word.Junk.
Seat.161
Sword.79
Nuker.
Csf.24
|
