Virus.Win32.HLLW.Juegos

0 0

Juegos is a very dangerous Win32 worm virus. The virus itself is a Windows PE EXE file about 14KB in size and written in VisualBasic.

The virus copies itself to the system by the name c:\windows\System\Shell.exe, and to the A: floppy disk by the name a:\Juegos.exe.

Juegos spreads from floppy disks to hard drives (when users runs the infected file on a floppy disk), and from hard drives to floppy disks.

The virus also registers a copy of itself in the c:\windows\win.ini file by the run=c:\windows\System\Shell.exe command.

Thus the virus is not able to infect the system which does not have Windows installed in the C:\WINDOWS directory.

On the 31st of a month the virus deletes the files:

 c:\*.bat
 c:\*.ini
 c:\windows\*.ini
 c:\windows\*.dll
 c:\windows\*.exe

After deleting these files Juegos displays this message:

LOLO el loco