Selected viruses, spyware, and other threats: sorted alphabetically
Installation
The virus creates and runs a new thread with its own program code within the following processes:
explorer.exe
Executable files infection
The virus searches local drives for files with the following file extension:
Files are infected by adding a new section that contains the virus or by appending its code to the last section.
.exe
.scr
Size of the code inserted is 9 KB.
Other information
The virus contains a list of (2) URLs.
It tries to download several files from the addresses.
The HTTP protocol is used.
It can send various information about the infected computer.
The virus searches for windows with the title containing any of the following strings:
If found, the virus creates and runs a new thread with its own code within the relevant processes.
TibiaClient
