Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Short description
Win32/Lafee.B is a file infector.
Installation
The virus creates and runs a new thread with its own program code within the following processes:
  • explorer.exe
Executable files infection
The virus searches local drives for files with the following file extension:
  • .exe
  • .scr
Files are infected by adding a new section that contains the virus or by appending its code to the last section.

Size of the code inserted is 8 KB .
Other information
The virus contains a list of (2) URLs. It tries to download several files from the addresses. The HTTP protocol is used.

It can send various information about the infected computer.

The virus searches for windows with the title containing any of the following strings:
  • TibiaClient
If found, the virus creates and runs a new thread with its own code within the relevant processes.