Find a Partner
This window is encrypted for your security.
Need help? Ask the community or hire an expert.
Go to Avira Answers
-Worm.Magistr.b [Kaspersky], W32.Magistr.B@mm, W32/Magistr.b@MM [McAfee], W32/Magistr.32768@mm [Frisk], PE_Magistr.B [Trend], W32/Magistr-B [Sophos], Win32.Magistr.29188 [Computer Associates]
Sent by email.
The difference between the original and this version of the worm is: a different kind of damage routine. The virus overwrites the file WIN.Com in Windows directory and the file NTLDR on C: level with a program, which deletes important drive data on start. If the computer is infected over network, the worm inserts iteslf in WIN.INI and SYSTEM.INI. The virus searches for GIF files and sends GIF pictures from the infected computer, just as it can send clean DOC files. The worm destroys *.NTZ files if it can detect them. It tries to terminate ZoneAlarm firewall, if installed.
Description inserted by Crony Walker on Tuesday, June 15, 2004