W95.Sosume.3363


Aliases: Virus.Win32.Alcaul.h, Win32.Alcaul.h, W32/Society.dr,   W95.Sosume.3363, Win95.Necromancer.3363
Variants: Win32:Alcaul-B1,   Win32/Alcopaul,   Win32.Society.A,   W32.Alcaul.h,   Suspect File

Classification: Malware
Category: Computer Virus

Status: Active & Spreading
Spreading: Slow
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 27 Feb 2002
Damage: Low

Characteristics: The W95/Sosume.3363 program is a 32 bit virus that affects windows operating systems such as Windows 95 or Windows 98.

More details about W95.Sosume.3363

W95/Sosume.3363 is a 32 bit virus that affects windows operating systems such as Windows 95 or Windows 98. Once W95.Sosume.3363 is executed, the virus activates and stays on memory resident. The virus infects files on drives C, drive D, and drive E when they are accessed.

The application can also monitor the user’s visited web pages and clicked links. These are reported to a remote server and used as a basis for delivered ads. System information such as IP address, system settings, screen resolution, and time zone may also be reported. The EULA of the adware program reportedly states that it can change the settings of certain operating systems. Its server is automatically added to the exempted list on computers running on Windows XP Sp2. This allows its pop-up advertisements to be displayed in spite of a personal firewall.