Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

WORM_DARBY.D

Feb 23, 2004 2:52PM PST

Virus type: Worm

Destructive: No

Aliases: WORM/Darby.D

Description:


This memory-resident worm arrives via peer-to-peer, file-sharing applications or Internet Relay Chat (IRC).

To propagate through peer-to-peer networks, it drops copies of itself using enticing file names on default shared folders.

This worm overwrites HTM files. It exploits known vulnerabilities in Windows known as the Object Tag Code Base Exploit (MS02-015) and MHTML Exploit (MS03-014). It also terminates certain processes, which are usually associated with antivirus programs.

This UPX-compressed malware is written and compiled using Visual Basic, a high-level programming language. It uses an icon usually associated with Folders.

It runs on Windows 95, 98, ME, NT, 2000 and XP.

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DARBY.D

Discussion is locked