This is a polymorpic worm is written in Batch script with the extensions Windows 2000/XP (cmd.exe). The worm contains two parts: polymorphic generator and main body. The polymorphic generator reconstruces the main body on each start of batch file. ... [More]

This is an mIRC worm combined with a memory resident parasitic stealth DOS virus. The DOS instance, when run, hooks INT 21h, and writes itself to the end of DOS COM and EXE files that are executed or opened. The virus is encrypted in COM and EXE fil... [More]

This is a virus-worm that infects Windows systems and spreads via IRC channels. The worm itself is a Windows executable file, written in MS Visual C and compressed by PECompact (compressed size is about 35K, uncompressed size is about 65K). When a... [More]

This worm spreads via IRC channels and infects MS Word documents. The virus itself is a Word document containing a macro named Mumps.InstallationWhen opened, the file will:attempt to disable the Security menu in the Macro menu disable the ban on act... [More]

IRC-Worm.EvionEvion is an IRC worm spreading via IRC channels. The virus is written in Visual Basic Script (VBS). It overwrites .vbs and .html files on all local and mapped drives.Installing: When the worm is executed it does the following:Evion cre... [More]

This is a virus-worm that spreads via IRC channels. The worm itself is a batch-script file about 3 Kb in length.The worm copies itself to the following batch files:C:\Windows\winstart.batC:\Windows\LINUX_SH_DOS_BAT_WIN_JS.batC:\Win95\LINUX_SH_... [More]

This is a simple network worm that replicates in IRC channels.The worm sends the following message to all channel users, except channel operators, that connect to the channel where an infected user is connected:heyto get OPs use this hack in the cha... [More]

This is an IRC worm spreading through IRC channels and using the mIRC client for spreading. The worm appears on a computer as the README.EXE DOS program. When this file is executed by a user, the virus installs itself resident into DOS memory and in... [More]

This worm spreads via MSN by means of file transfer. The worm file is packed using several packing programs, and is approximately 17KB when packed. The unpacked file is approximately 155KB in size.InstallationThe worm copies itself to the Windows di... [More]

This worm spreads via the Internet using MSN Messenger. It is written in Visual Basic and is approximately 160KB in size. The worm contains a backdoor program, Backdoor.Win32.Rbot.fy which it will extract from itself and launch on the victim machine... [More]