Gayantha harshana said:
Dr;wotsan kiyanne mokakda kiyala dan nam dannawa aye ahanna?
mathat oka una malaya.. Dr .watson eke attack mode ekakuth thiyanawa.mata format karala thami machine eka goda daganne puluwan une.
link-http://www.symantec.com/security_response/writeup.jsp?docid=2000-122109-2016-99
Dr Watson
Risk Level 1: Very Low
Printer Friendly Page
Updated: February 13, 2007 11:57:07 AM
Also Known As: Dr.Watson, Dr W, DrWatson.1503, Dr W.1503
Type: Virus
This virus infects DOS .COM files. The Dr Watson virus can spread through intranets, the Internet, or other e-mail. This virus has never been encountered by our customers. It is 1503 bytes long. This virus installs itself as a memory-resident program. This virus does not contain a destructive payload. It is not encrypted in any way. It does not exhibit multipartite behavior. In other words, it is incapable of infecting floppy disk or hard drive boot records. It virus does not try to actively conceal itself. This virus infects files in a manner that makes disinfection impossible.
The virus creates a file called C:\DRWATSON.COM and adds the line "@drwatson" to C:\AUTOEXEC.BAT. May display the message "Tracing mode has been destroyed." Please also note that Windows does have a tool called Dr Watson(DRWATSON.EXE) which is usually located in the WINDOWS directory. The virus probably uses this file name to confuse the user and make this file (C:\DRWATSON.COM) less suspicious.
Protection
- Initial Rapid Release version December 21, 2000
- Latest Rapid Release version December 21, 2000
- Initial Daily Certified version December 21, 2000
- Latest Daily Certified version December 21, 2000
- Initial Weekly Certified release date pending
Click
here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
Distribution