W32.Buffy.D


Aliases: I-WORM.Buffy.d [KAV]
Variants: N/A

Classification: Malware
Category: Computer Worm

Status: active & spreading
Spreading: slow
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 20 Jan 2003
Damage: Low

Characteristics: The W32.Buffy.D program connotes the popular TV show Buffy the vampire slayer. It is not a harmful virus because it ill just show a text message when your computer starts.

More details about W32.Buffy.D

Mirc chat services have been the pit hole of all underground worms, Trojan horses and viruses. The same thing applies to this worm. It uses mirc to propagate and infect. Also, as with any other worms and or virus, it replicates itself but using a different file name. This worm names their infected files as c:\btvs.exe and consequently appending c:\mirc\script.ini, a mirc file which is also recognized as irc.family.gen by symantec antivirus products. When all this is done, the worm creates and drops c:\windows\winstart.bat and c:\windows\start menu\programs\startup\start.vbs, which are not malicious also. Because of this, this virus is very complicated to detect even with the use of antivirus. It affects Windows Operating Systems such as Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, and Windows XP but limited to macintosh, os/2, unix and linux. This however does not have destructive effects on your computer. It just shows a text on screen as well as a warning message whenever the computer is restarted.

You may see a text on you computer such as this one, “We like to talk big. Vampires do. 'I'm going to destroy the world.'that's just tough guy talk. Strutting around with your friends over a pint of blood. The truth is, i like this world. You've got...Dog racing, manchester united. And you've got people. Billions of people walking around like happy meals with legs. It's all right here. But then someone comes along with a vision. With a real... Passion for destruction. Angel could pull it off. Goodbye, picadilly. Farewell, leicester bloody square. You know what i'm saying? Buffy.d.” A message box containing the following may also be displayed: "No one asks for their life to change, not really. But it does. So what, are we helpless? Puppets? No. The big moments are gonna come. You can’t help that.”