Win32.Emotion
Details
Win32.Emotion.a
This is a companion virus. While infecting it searches for .EXE files in the current and Windows directory, renames .EXE file with BIN extension and writes its code with the original name of infected file. The virus is the Windows32 PE executable program, but it is able to infect EXE files of any format (DOS, OS/2, Win16/32) - the virus pays no attention for that, and to return control to the host file just executes it by WinExec system function.
On May 13th the virus displays the message:
w32.Emotion - By: Techno Phunk [TI]
A pool of emotions, beaten and abused.
Who will swim in the stale waters? Not a one
But many will scoff and destroy this pool with apathy
The virus then “swaps” mouse buttons.
Another version of this virus has the same code, but the displayed text is replaced with new one:
w32.Sadness - By: enchanter [Volt]
A time of sadness, a time to remember,
To remember what we once had and what we did,
and how we watched it all fade awayall…………..
Related Posts