| Description:
|
Details
Worm.Win32.Nople
It is not a dangerous Win32 worm virus. The virus itself is Windows PE EXE file about 51Kb of length, written in Microsoft Visual C++. The virus copies itself to C:WinNT directory with the "noplease_flash_movie.exe" name, then spreads with the same name over local network and copies itself to shared network drives. The worm is able to spread over WinNT machines only. It also starts its copies on remote machines as services, in case there is permission for that.
The worm manifests itself with a video-effect and displays the text:
|
