Alias:Win95.Fono.15327, W32.Opaserv.Worm
Type:Worm 
Size: 
Origin: 
Date:00-00-0000 
Damage:Spreads through IRC ports. 
VDF Version:  
Danger:Low 
Distribution:Low 

DistributionThe worm uses mIRC to spread through IRC ports over the Internet.

Technical DetailsWhen W95/Fono is activated on Windows 95/98 computers, it creates the file C:\WINDOWS\SYSTEM\FONO98.VXD with hidden properties. It modifies files from C:\WIN95INCA.COM.
It also changes the following:
in C:\WINDOWS\SYSTEM.INI:
[386Enh] device=fono98.vxd
and in C:\WINDOWS\APPS.INF: [PIF95]INCA.EXE=%INCA.EXE%,moricons.dll,1,,HUMANS.EXE,HUMANS.CFG,1 [INCA.EXE]LowMem=450Enable=lml,dos,mseDisable=win
[Strings]INCA.EXE="Inca"

It modifies the registry entry: HKLM\software\microsoft\windows\currentversion\ms-dos emulation\appcompat\INCA.EXE SURVOL.STK 01000000
説明の挿入者 Crony Walker の 2004年6月15日火曜日

戻る . . . .

© 2013 Avira Operations GmbH & Co. KG. All rights reserved.

マイアカウント

https:// このウィンドウは暗号化されています。