Article View: it.comp.sicurezza.virus
Article #65NEW VIRUS (2)
From: Miruko Akagi
Date: Fri, 11 Jan 2002 19:22
Date: Fri, 11 Jan 2002 19:22
14 lines
1633 bytes
1633 bytes
http://www.viruslist.com/eng/viruslist.html?id=1568 Murphy Family "Murphy" family. This is a dangerous memory resident virus. It hooks INT 8 and 21h, and infects COM, EXE and OVL files that are executed. Some time after activation, the virus "launches" several balls of different colors randomly moving around the screen (the effect is similar to the ball movement of the "Ping-Pong" virus). On Tuesday, the infected EXE files format the disks. The virus contains the following text:
Technical Details
Message-ID:
<q2cu3u0nokmprje743mgilorcn7rfdbgij@4ax.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!supernews.com!isdnet!area.cu.mi.it!newsfeeder.edisontel.com!newsfeeder.inwind.it!inwind.it!nntp.infostrada.it!cyclone2.libero.it!twister2.libero.it.POSTED!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1009f3,c92b4196fcd761ed,start X-Google-Attributes: gid1009f3,public X-Google-Thread: 111d5f,c92b4196fcd761ed,start X-Google-Attributes: gid111d5f,public X-Google-ArrivalTime: 2002-01-11 11:22:17 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!supernews.com!isdnet!area.cu.mi.it!newsfeeder.edisontel.com!newsfeeder.inwind.it!inwind.it!nntp.infostrada.it!cyclone2.libero.it!twister2.libero.it.POSTED!not-for-mail X-Posting-Agent: Hamster/1.3.21.0 From: Miruko Akagi <miruko_akagi@mioprovider.it> Newsgroups: it.comp.sicurezza.virus,free.it.hacker.virus Subject: NEW VIRUS (2) Message-ID: <q2cu3u0nokmprje743mgilorcn7rfdbgij@4ax.com> X-Newsreader: Forte Agent 1.8/32.553 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 15 Date: Fri, 11 Jan 2002 19:22:16 GMT NNTP-Posting-Host: 151.24.188.117 X-Complaints-To: abuse@libero.it X-Trace: twister2.libero.it 1010776936 151.24.188.117 (Fri, 11 Jan 2002 20:22:16 MET) NNTP-Posting-Date: Fri, 11 Jan 2002 20:22:16 MET Organization: [Infostrada]