W32/Stanit - Malware

See also

Summary

Full description

Statistics

Virus:	W32/Stanit
Date discovered:	14/07/2005
Type:	File infector
In the wild:	No
Reported Infections:	Low
Distribution Potential:	Medium
Damage Potential:	Medium
Static file:	No
File size:	3.666 Bytes
VDF version:	6.31.00.202 - Thu, 14 Jul 2005 07:45 (GMT+1)

General Aliases:
   • Symantec: W32.Licum
   • Mcafee: W32/Gael.worm.a
   • Kaspersky: Virus.Win32.Tenga.a
   • TrendMicro: PE_TENGA.A-O
   • Sophos: W32/Tenga-A
   • VirusBuster: virus Win32.Tenga.A
   • Bitdefender: Win32.Gael.3666

Platform / OS:
   • Windows XP

Side effects:
   • Downloads a malicious file
   • Makes use of software vulnerability

   W32/Stanit is a windows file infector that searches the computer for PE executable files. The search routine scans the hard drive recursively for .exe files. It appends its code at the end of the infected files, modifying the entry point in the file header in order to execute itself.

   In order to prevent multiple infections of the same file, an infection marker is added to the modified files: the 50th byte in each infected file is modified to value 56 - ascii value "V".

For more details see full description here .

Description inserted by Sergiu Oprea on Mon, 28 Aug 2006 08:45 (GMT+1)
Description updated by Sergiu Oprea on Fri, 08 Sep 2006 13:56 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back