DoS.Perl.Vqserver

Removal instructions

1. Delete the infected script file.
2. Update your antivirus databases and perform a full scan of the computer (download a trial version).

Payload

This script establishes a connection to port 80 on the HTTP vqServer 1.4.49. The remote malicious user gives the name of the server to be attacked.

A specially crafted HTTP GET command containing a string of 65000 ‘A’s is then sent to the server. As a result of processing this command, the system under attack will crash.

Technical Details

This malicious program can be used to conduct a DoS attack on a remote server. It is a script file, written in Perl. The infected file is 744 bytes in size.