Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Win32/Datom.A

Win32/Datom.A is a worm that uses shared network disks to spread.  The worm requires the operating system Windows 95 or newer for its operation.  Apart from replication the worm has no other forms of manifestation.  The worm code is divided into 3 files located in the directory where the operating system is installed on the attacked computer.  These are the files:

- msvxd.exe with length of 58368 bytes
- msvxd16.dll with length of 54784 bytes
- msvxd32.dll with length of 81408 bytes

The file msvxd.exe creates a new key "MSVXD" in the system registry under HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run\ pointing to the file msvxd.exe located in the directory containing the installation of the Windows operating system.  By that the worm ensures that it will be run at each start of the computer.  At the start of the computer the file msvxd.exe executes the DLL libraries msvxd16.dll and msvxd32.dll which contain the code necessary for spreading of the worm.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this encyclopedia may be reproduced, transmitted or used in any other way in any other form or by any means without prior permission from Eset.