| 1. | IM-Worm.Mac.Leap.a
This is an Instant Messaging (IM) worm which infects computers running
MacOS X. It is also capable of infecting MacOSX applications but due to
a bug in the virus code, infected programs will no longer run.
The worm was first spotted on the MacRumors (http://forums.macrumors.com/)
forums, on the...
|
| 2. | IM-Worm.OSX.Leap.a
This is an Instant Messaging (IM) worm which infects computers running
MacOS X. It is also capable of infecting MacOSX applications but due to
a bug in the virus code, infected programs will no longer run.
The worm was first spotted on the MacRumors (http://forums.macrumors.com/)
forums, on the...
|
| 3. | IM-Worm.Win32.Bropia.ad
This worm is written in Visual Basic and normally has two components: the IM-Worm itself, and a variant of Backdoor.Win32.Rbot which is embedded in the file. The backdoor is usually packed with UPX and Morphine. It will be detected as Backdoor.Win32.Rbot.gen.
The worm is 188,416 bytes in size. The...
|
| 4. | IM-Worm.Win32.Bropia.aj
This worm spreads via the Internet using MSN Messenger. It is written in Visual Basic and is approximately 200 KB in size.
The worm contains a backdoor program, Backdoor.Win32.Rbot.hg which it will extract from itself and launch on the victim machine.
Installation
Once launched, the worm copies...
|
| 5. | IM-Worm.Win32.Funner
This worm spreads via the Internet using MSN Messenger to propagate. It is written in Visual Basic. It is approximately 56KB in size, and packed using ASP. The unpacked file is approximately 306KB in size.
Installation
Once launched, the worm copies itself to the Windows system directory under the...
|
| 6. | IM-Worm.Win32.Jitux
Jitux is an Internet worm that spreads via the MSN Messenger system. It is written in Visual Basic and its' size is about 24KB.
The worm sends messages with the URL of the downloadable version of the worm.
Once the worm is launched, it scans the victim MSN Messenger contact list and sends all...
|
| 7. | IM-Worm.Win32.Kelvir.k
This worm spreads via Windows Messenger.
It is written in Visual Basic, and packed using UPX. The packed file is 8704 bytes in size, and the unpacked file is 24064 bytes in size.
Once launched, the worm sends a messenger to all MSN Messenger contacts:
"its you"
The message is accompanied by the...
|
| 8. | IM-Worm.Win32.Kelvir.e
This worm spreads via Windows Messenger. It is written in Visual Basic. The worm file is 24064 bytes in size.
The worm contains the following text strings:
OMGOOSES KELVIR 1000
KelVir-FiNAL
Once launched, the worm sends a message to all contacts in the MSN Messenger contact list:
"omg u have to...
|
| 9. | IM-Worm.Win32.Opanki.d
This worm is written in C, and is packed using MEW and PE_Patch. It spreads as a link across the AIM network and has Trojan-Dowloader capabilities. The packed body is 3 973 bytes in size.
MD5: 4d0a71e9e37a73bd27932e13d03b7ec0
Installation
This worm arrives as a link via the AOL Instant Messaging...
|
| 10. | IM-Worm.Win32.Pykse.a
This worm spreads via Skype. It is a Windows PE EXE file. Modifications of this program may vary in size, from 57KB to 179KB.
Installation
When launched, the worm extracts a file from its own executable file, and saves it to the Windows temporary directory:
%Temp%\sandra.jpg
This file is 74 880...
|
