Aliases

Virus.Win64.Rugrat.a (Kaspersky Lab) is also known as: Win64.Rugrat.a (Kaspersky Lab), W64/Rugrat (McAfee),   W64.Rugrat.3344 (Symantec),   W64/Rugrat-A (Sophos),   W64_RUGRAT.A (Trend Micro),   W64/Rugrat.3344 (H+BEDV),   Win64:Rugrat-3344 (ALWIL)

Description added	May 27 2004
Behavior	Virus

Technical details

THe very first Win64 virus searches for and infects PE files.

Rugrat adds its code to the bottom of the infected file.

Rugrat does not infect files protected by SFC.

This virus was written by the same coder as Win32.Chiton. The infection method is the same.

Rugrat.a contains errors.

Contains the following text:

Shrug - roy g biv
06/05/04
*4U2NV*