TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
PE_VIRUT.NS
Overview

Malware type: Virus

Aliases: Virus.Win32.Virut.d (Kaspersky), W32/Virut.gen (McAfee), W32.Virut.H (Symantec), W32/Virut.H (Avira), W32/Vetor-A (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, and Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

High

Distribution potential:

Medium

Infection Channel 1 : Infects files


Description: 

This virus infects files with extensions .EXE and .SCR.

It does not infect files that contain certain strings in their file names.

It may be downloaded unknowingly by a user when visiting malicious Web sites. It may be dropped by other malware.

It uses any of several types of infection techniques.

It listens to varying ports and connects to an Internet Relay Chat (IRC) server, where it joins a certain channel. Once connected, it allows a remote user to download and execute files onto the affected system. This routine effectively compromises the affected system's security.

For additional information about this threat, see:
Solution
Technical Details

Description created: Apr. 9, 2007 1:58:01 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.