W32/Supova.A

description-logoAnalysis

  • Virus is 32bit, with a size 40,960 bytes
  • Virus is coded in Visual Basic 6, and requires MSVBVM60.DLL in order to be a threat
  • When executed, this virus may copy itself to the Windows folder as these filenames:

    Alles-ist-vorbei.exe
    Desktop-shooting.exe
    Hello-Kitty.exe
    BigMac.exe
    Hellokitty.exe
    Cheese-Burger.exe

  • Next, virus may modify the registry for the Kazaa Peer-to-Peer file sharing application such that the shared folder is now Windows\Media

  • Virus may copy itself to the Windows\Media folder as the following names –

    Age of empires 2 crack.exe
    Battlenet key generator (WORKS!!).exe
    Britney spears nude.exe
    CloneCD + crack.exe
    CloneCD all-versions key generator.exe
    DivX codec v60.exe
    DivX newest version.exe
    DivX patch - Increases quality.exe
    DivX pro key generator.exe
    DivX.exe
    Gamecube Emulator (WORKS!!).exe
    Grand theft auto 3 CD1 crack.exe
    GTA3 crack.exe
    Hack into any computer!!.exe
    Half-life ONLINE key generator.exe
    Half-life WON key generator.exe
    KaZaA media desktop v20 UNOFFICIAL.exe
    KaZaA spyware remover.exe
    Key generator for all windows XP versions.exe
    Key generator for over 1,000 applications (really!).exe
    Macromedia dreamweaver MX (crack).exe
    Macromedia key generator (all products).exe
    Microsoft key generator, works for ALL microsoft products!!.exe
    Microsoft Office XP (english) key generator.exe
    Microsoft Office XPiso.exe
    Microsoft Windows XP crack pack.exe
    Norton antivirus 2002.exe
    Quake 4 BETA.exe
    Star wars episode 2 downloader.exe
    Warcraft 3 battlenet serial generator.exe
    Warcraft 3 ONLINE key generator.exe
    Windows XP key generator.exe
    Windows XP serial generator.exe
    Winrar + crack.exe
    Winzip 80 + serial.exe
    XBOX emulator (WORKS!!).exe
    Xboxinfo.exe
    Virus may also attempt to distribute itself to others on an infected host by sending itself to contacts listed in the MSN Messenger contact list

Telemetry logoTelemetry