Main Menu
Home
Bookmark
Contact Us



 
Win32.HLLO.Roza Viruses Information

Name: Win32.HLLO.Roza
Category: Viruses
Description: Details
Win32.HLLO.Rozak

This is a dangerous, non-resident overwriting Win32 virus.
The virus itself is a Windows PE EXE file about 28 Kb in length, and it is written in Visual C++.
Depending on the internal counters, the virus searches recursively either for all files, or for files with the following extensions:
.exe
.avi
.mp3
.doc
.zip
.rar
.mpg
.mpg4

The virus searches for these files on the drives C:, D:, E:, F:, and overwrites their original contents with its body. These files can be restored only from a backup.
When the virus is launched, it searches for the file "neh.dll". If this file exists, the virus shows the following message and terminates:
-------------------------?
?Error ?
--------------------------
?Brak biblioteki: neh.dll?
--------------------------

After infecting files, the worm shows either the following message:
---------------------------------------------?
?WIN_KACZOR virus ?
----------------------------------------------
?I have just raped your drivesall ?
?I feel sorry, but my desires are stronger...?
----------------------------------------------

or two messages:
---------------------------------------------------?
?Kwa! ?
---------------------------------------------------?
?Co chcia?oby sie uruchomic programik? ?
?Nic z tego. Kaczor mowi: ZAGRAJ W SETTLERS IV!!!!!?
----------------------------------------------------
----------------------------------------------------?
?Kwa! Kwa! ?
----------------------------------------------?
?WIN_KACZOR ?
?by Nijamormoazazel ?
?Jzefw POLSKA ?
? ?
? And what Symantec? BloodHound doesn't work??
----------------------------------------------



Top Viruses Visited Pages:
Baboo - 675 visits
Invader. - 538 visits
Firstling.199 - 263 visits
Macro.Excel.Hidemo - 241 visits
Spartak.110 - 235 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 232 visits
Worm.P2P.Harex. - 225 visits
Coito.64 - 224 visits
Small.58. - 214 visits
DDoS.Win32.Kozo - 196 visits

Random Viruses Pages:
Avatar.Acid.67
CLL.94
Holiday Famil
Tigre.179
Polonaise Famil
Macro.Word97.Attentio
Macro.Word.Fom.
Macro.Word.Kerrang
Macro.Access.Detox.
Mefl.62


 


2006-2008 spyware32.com - Privacy Policy