..
Click anywhere to stop
Click anywhere to stop
Class | IRC-Worm |
Platform | BAT |
Description |
Technical Details
This is a polymorpic worm is written in Batch script with the extensions Windows ----------- BatXP.Saturn ********** by Second Part To Hell ----------- | I think, you are looking at the code and think: "What the hell is this?"| The answer is: A Windows XP Batch polymorph virus :D | WinXP is using a program named CMD.EXE instate of COMMAND.COM for DOS | You're able to make the really nice things with CMD which you wasn't | able to do it with COMMAND.COM. | | Information about the virus: | Virusname......................: BatXP.Saturn | Virusauthor....................: Second Part To Hell | Size...........................: The poly-engine has 1.301 Bytes | The whole virus has 4.158 Bytes | Encrypted......................: Yes, but only the virus part. | I'll crypt also the poly engine in | next versions. | Polymorphic....................: Yes | | written from 20.11.2002 to 22.11.2002 | in Austria | ---------------------------------------------------------------------- ModificationsIRC-Worm.Spth.bThe worm’s droppers are: SPISSTOM.BAT, C:PROGRA~1MIRCMIRC.BAT IRC-Worm.Spth.cThe worm’s droppers are: SPISSTOM.BAT, C:MIRCINSTALL.BAT IRC-Worm.Spth.dThe worm’s droppers are: DRRA.BAT, C:PROGRA~1MIRCSATURN.BAT |
Find out the statistics of the threats spreading in your region |