Selected viruses, spyware, and other threats: sorted alphabetically
Upon execution the virus tries to infect executable files in the %WINDOWS% and the %SYSTEM% folder by recursively enumerating all infectable files in these folders. The virus adds a new section named "XOR" at the end of the host file and writes its code there. The virus body size is 2048 bytes and the virus uses an infection marker to avoid multiply infection of one file.
All infected files containing the following strings:
-= XOR 2009 Valhalla =- Assembled 1997 .. Activated 07.2002 - devoted for peace and harmony in universe against war, racism, terrorism and cruel brutality .. remember .. life is the most important thing - not money .. it's time for a revolution NOW ....
