Selected viruses, spyware, and other threats: sorted alphabetically
Executable files infection
The virus searches for executables with one of the following extensions:
Executables are infected by appending the code of the virus to the last section. The host file is modified in a way that causes the virus to be executed prior to running the original code..exe
.scr
The virus avoids infecting files with name containing any of the following strings:
WINC
WCUN
WC32
PSTO
Other information
The virus connects to the IRC network. It can be controlled remotely. The virus connects to the following address:
The virus is able to update itself or execute arbitrary file.proxim.ircgalaxy.pl
The virus contains the following text:
O noon of life! O time to celebrate!
O summer garden!
Relentlessly happy and expectant, standing: -
Watching all day and night, for friends I wait:
Where are you, friends? Come! It is time! It's late!
