Virus:W32/Adson.1703
Date discovered:18/09/2007
Type:File infector
In the wild:No
Reported Infections:Low
Distribution Potential:Low to medium
Damage Potential:Medium
Static file:No
File size:1.702 Bytes
IVDF version:6.39.01.145 - Tuesday, September 18, 2007

 General Method of propagation:
   • Infects files


Aliases:
   •  Symantec: W32.Adson.1703.B
   •  Mcafee: W95/Adson.gen
   •  Kaspersky: Virus.Win32.Adson.1703
   •  Sophos: W32/Adson-1703
   •  VirusBuster: Win95.Adson.1703
   •  Bitdefender: Win32.Adson.1703


Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003


Side effects:
   • Infects files

 Files  It deletes the following files:
   • ANTI-VIR.DAT
   • CHKLIST.MS
   • CHKLIST.CPS
   • AVP.CRC

 File infection Infector type:

Appender - The virus main code is added at the end of the infected file.
– The following section is added to the infected file:
   • .Adson

Damaging - The files may be improperly infected. This results in infected files that are broken and crash.


Stealth:
 No stealth techinques used. It modifies the OEP (Original Entry Point) of the infected file to point to the virus code.


Self Modification:

Encrypted - The virus code inside the infected file is encrypted.


Method:

This direct-action infector actively searches for files.


Infection length:

- 2048 Bytes


The following files are infected:

By file type:
   • *.exe

Files in any of the following directories:
   • %all directories%

 Miscellaneous String:
Furthermore it contains the following string:
   • Win32.Adson (c) Black Jack /LineZer0 /Metaphase this virus was written in Austria in 1999/2000

 File details Programming language:
 The malware program was written in Assembler.

Description inserted by Daniel Constantin on Friday, February 19, 2010
Description updated by Daniel Constantin on Friday, February 19, 2010

Back . . . .