Aliases: W32.Chimera/Virus.Win32.Chimera.a/Virus:W32/Chimera.A @ F-Secure

Classification: Malware
Category: Computer Virus

Status: active
Spreading: Low
Geographical info: Low
Removal: Easy
Platform: W32
Discovered: 08 Dec 2008
Damage: Low

Characteristics: The W32.Chimerux program is acquired through the OE60Move.exe file.

More details about W32.Chimerux

It is an appending parasitic file infector through which the virus body is located inside two layers of variable-key encryption. When run, the W32.Chimerux program displays a dialog box that allows a user to append files to other files on the computer, showing a pop-up box containing source, delimiter, and destination and move options. The virus searches for all fixed, removable, and network drives for files with.exe and .scr file extensions. Files with these extensions are consequently infected. The W32.Chimerux program does not have any other payload other than spreading itself. However, it can move the mouse buttons or disable the keyboard and it can infect Portable Executable (PE) files on both fixed and removable drives that have drive letters between B and Z.

Experts suggest that users should be aware that files with extensions EXE and SCR and size between 20480 to 5242880 bytes will be infected. On the other hand, files with check sum of those as Windows system files will not be infected.