Jump to content

Kazaa Virus!


Recommended Posts



The W32/Oror family of worms create two data files in the Windows folder which contain information used by the worms while they are running. These data files have innocent-looking names, incorporating the first few letters of the computer name forwards and backwards. These files have normal-looking extensions, including .DEF, .VXD and .SYS. Example of the names of these data files on a computer named VICTIM might be:



dosvictim32.vxd niwmitciv98.sys


If these files are removed whilst the worms are active, the worms immediately begin deleting all files on the computer.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Create New...