| Description:
|
Details
Win32.HLLC.Vedex
Win32.HLLC.Vedex is a dangerous non-memory resident companion Win32 virus. The virus itself is a Windows PE EXE file about 45Kb in length, written in Delphi.
It searches for .EXE files in the current directory and subdirectories and infects them. While infecting it renames victim files with the name '%FileName%vdx.dll', and replaces the victim with its own copy, for example:
NOTEPAD.EXE -> NOTEPADvdx.dll
To return control to the host file, the virus copies the %FileName%vdx.dll file to %FileName%vdx.dll.EXE and executes it, for example:
NOTEPADvdx.dll -> NOTEPADvdx.dll.EXE
The virus also creates the C:IOS.BAT file with a hidden attributes set, writes a trojan Batch program to this file and runs it. This trojan, when run increases its file length in an endless loop, and fills all the disk's free space. |
