Selected viruses, spyware, and other threats: sorted alphabetically
Win95/Whog.878.B |
Win95/Whog.878.B is a resident virus written especially for operating systems Windows 9x/ME. The code counts with imperfections of Windows 9x/ME. It does not work in the environment of Windows 2000, NT and XP.
Win95/Whog.878.B uses a trick that occurred for the first time with the virus Win95/CIH. Using this trick it overcomes the barrier separating the authorization level of common programs (RING 3) from the authorization level of system core (RING 0, the highest authorization). The virus replaces the current home page of the Internet Explorer browser with http://202.115.16.8/~ekang manipulating the system registry.
Win95/Whog.878.B then redirects some functions providing file access to its code, and attacks all files with the extension EXE having format PE.
© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.
