Virus.Win32.HLLW.Dervise

tag:Executable File and Boot Viruses

0 0

Dervice is not a dangerous Win32 worm virus. The virus itself is a Windows PE EXE file about 20Kb in size and written in Delphi. The virus copies itself to the Windows directory under the name "DWServise.exe", and to the A: floppy disk under the name "DW.exe". The virus spreads from floppy disks to hard drives (only in the event that a user runs the infected file on the floppy disk), and from hard drives to floppy disks. The virus also registers a copy of itself "DWServise.exe" in the system registry auto-run key:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
ServiceInternet = %WindowsDir%\DWService.exe

While spreading the virus send out 'beeps' via the PC speaker.

Device also creates the file WINSTART.BAT in the Windows directory and writes an "echo" command there that displays the following text upon Windows boot up:

You are welcomed by the manager of the disk drive of windows

previous:Virus.Win32.HLLW.Bezilom
previous:Virus.Win32.HLLW.Editorex

Virus Source from:

New articles

Virus.Win32.Chop.3808 It is not a dangerous nonmemory resident parasitic polymorphic Win32 virus. It searches for PE EXE files in the current directory, then writes itself to the en...Virus.Win32.Crypto This text was written with the help of Adrian Marinescu, GeCAD Software.This is a very dangerous memory resident parasitic polymorphic Win32 virus about 20K i...Virus.Win32.Delf.k This file virus replaces .exe files with its own body.The virus itself is a Windows PE EXE file 18944 bytes in size, written in Delphi. Payload...Virus.Win32.Devir This is a per-process memory resident parasitic poly-morphic Win32-virus. The virus infects PE EXE files that have .EXE filename extensions. When run, the viru...Virus.Win32.Ditex.aDitex is a memory resident parasitic Win32 virus. It is written in Microsoft Visual C and is about 33KB in size. The virus infects PE EXE files that have .EX...

Hot Articles

Virus.Win32.HLLW.Dervise

Computer Virus Clounds