Selected viruses, spyware, and other threats: sorted alphabetically

This is the first known script virus. It infects Macromedia Shockwave files with extension SWF. In Internet these files contain very favourite flash animations. By means of DEBUG utility it creates a v.com file on the disk and then it runs it. The virus is able to do this only on systems containing a cmd.exe file. This file is a standard part of Windows NT/2000/XP operating systems, but Windows 9x/ME does not contain it. Length of the v.com file is 926 bytes. After it is executed it looks for files with the SWF extension in the directory. It checks the inner structure of found files for FWS signature. If it finds one it will write its dropper at the beginning of that file.
This virus is so called "proof of concept" and does not have a big chance to be spread.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.