|
|
Win32.Sprede Viruses Information
| Name: |
Win32.Sprede |
| Category: |
Viruses |
| Description:
|
Details
Win32.Spreder
Spreader is a harmless nonmemory resident parasitic Win32 virus. It infects .EXE files that have sizes ranging from 100KB to 10MB. The virus itself is a Windows PE EXE file written in Microsoft Visual C++. The virus size is about 60KB, but during the infecting procuess the size increases by about 410KB.
The virus looks for victim EXE files in the Kazaa (file sharing network) download directory (if there is one).If Kazaa is not installed the virus fails to infect any files.
While infecting the virus writes itself to the beginning of victim files, the original file body is moved down before infecting. To release control to the host file the virus creates its "disinfected" copy in the savenow00.exe file in the Windows directory and then executes it.
If the c:devspreader directory exists, the virus writes an action (listing its own actions) to the debug.log directory.
The spreder virus doesn't manifest itself in any way.
The virus contains the text string:
spreader
Version 1.0 |
Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 72 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win16.Klon.1177 - 42 visits
Win32.Hidra - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
Jester2.70
Democracy.367
Natas.474
Bupt914
LaLiberte.22
Tu28.53
VBS.Rabbit.
Energizer.50
Java.StrangeBre
Macro.Excel.Compa
|
|
