Win32.Santana:
|
Virus name |
Win32.Santana |
|
Operating systems |
Windows 9x |
Infection:
The virus is transfered via Email attachment. The attachment has the
name NOCIH.EXE and masks itself as a protection to the CIH-virus, which is
also known as Tschernobyl-virus. Because 26th of April is an activationdate
for the CIH-virus, it is reasonable to scan the system for the virus. But
if you execute NOCIH.EXE the Win32.Santana is transfered into your PC.
Payload:
The virus affects EXE-files and isn't conspicious in the system. The
entire version of the virus is harmless. Only a text shows its existence:
Virus "SANTANA" created by Net'$ Wa$te
[RespawneD EViL].
It is clear, that new variants of the virus can cause more damage.
Remarks:
Kaspersky Lab reports about the virus and delivers an update of its
AntiViral Toolkit Pro (AVP), which finds the Santana and removes it. (Update...)
Copyright
by All-About-PC. All rights reserved.
All information on this website is protected by international law. Any
reproduction or publication without the agreement of the editorial
office is prohibited. Please respect the work of others.
Although all information on this website is hardly recherched and
mostly checked and confirmed from secondary side, we do not take the
responsibillity for any damage originated from the use of the
information on our site. |
