Reply to thread

Message: <blockquote data-quote="sanfOdian" data-source="post: 3268049" data-attributes="member: 135326">mathat oka una malaya.. Dr .watson eke attack mode ekakuth thiyanawa.mata format karala thami machine eka goda daganne puluwan une.link-http://www.symantec.com/security_response/writeup.jsp?docid=2000-122109-2016-99Dr Watson Risk Level 1: Very Low  <a href="http://www.symantec.com/security_response/writeup.jsp?docid=2000-122109-2016-99#" target="_blank">Printer Friendly Page</a> <ul> <li data-xf-list-type="ul"> <a href="http://www.symantec.com/security_response/writeup.jsp?docid=2000-122109-2016-99" target="_blank">SUMMARY</a></li> <li data-xf-list-type="ul"> <a href="http://www.symantec.com/security_response/writeup.jsp?docid=2000-122109-2016-99&tabid=2" target="_blank">TECHNICAL DETAILS</a></li> </ul>   Updated: February 13, 2007 11:57:07 AM  Also Known As: Dr.Watson, Dr W, DrWatson.1503, Dr W.1503  Type: Virus This virus infects DOS .COM files. The Dr Watson virus can spread through intranets, the Internet, or other e-mail. This virus has never been encountered by our customers. It is 1503 bytes long. This virus installs itself as a memory-resident program. This virus does not contain a destructive payload. It is not encrypted in any way. It does not exhibit multipartite behavior. In other words, it is incapable of infecting floppy disk or hard drive boot records. It virus does not try to actively conceal itself. This virus infects files in a manner that makes disinfection impossible.The virus creates a file called C:\DRWATSON.COM and adds the line "@drwatson" to C:\AUTOEXEC.BAT. May display the message "Tracing mode has been destroyed." Please also note that Windows does have a tool called Dr Watson(DRWATSON.EXE) which is usually located in the WINDOWS directory. The virus probably uses this file name to confuse the user and make this file (C:\DRWATSON.COM) less suspicious.Protection<ul> <li data-xf-list-type="ul"> Initial Rapid Release version December 21, 2000</li> <li data-xf-list-type="ul"> Latest Rapid Release version December 21, 2000</li> <li data-xf-list-type="ul"> Initial Daily Certified version December 21, 2000</li> <li data-xf-list-type="ul"> Latest Daily Certified version December 21, 2000</li> <li data-xf-list-type="ul"> Initial Weekly Certified release date pending</li> </ul>Click <a href="http://www.symantec.com/security_response/writeup.jsp?docid=2000-122109-2016-99#" target="_blank">here</a> for a more detailed description of Rapid Release and Daily Certified virus definitions. Threat Assessment Wild<ul> <li data-xf-list-type="ul"> Wild Level: Low</li> <li data-xf-list-type="ul"> Number of Infections: 0 - 49</li> <li data-xf-list-type="ul"> Number of Sites: 0 - 2</li> <li data-xf-list-type="ul"> Geographical Distribution: Low</li> <li data-xf-list-type="ul"> Threat Containment: Easy</li> <li data-xf-list-type="ul"> Removal: Easy</li> </ul>Damage<ul> <li data-xf-list-type="ul"> Damage Level: Low</li> </ul>Distribution<ul> <li data-xf-list-type="ul"> Distribution Level: Low</li> </ul></blockquote>

Verification: Dawasata paya keeyak thibeda?

Top Bottom