Was hit by Tenga.A / Licum.A Virus
2005-11-29 12:15:23
How unfortunate of me after realizing i was infected by a virus named (as above) on my computer. Luckily it was easy to contain however it does infect all my .EXE files in my pc and cant be cleaned, must be deleted. Here's what the virus do, was discovered 13th July 2005 (still new) : Tenga infects PE exe files. The virus can also act as a Network-Worm on machines with an unpatched DCOM RPC vulnerability. Microsoft Security Bulletin MX03-026 details the vulnerability. After launch, Tenga checks if the domain vx9.users.freebsd is available and attempts to dowload Trojan-Downloader.Win32.Small.bdc from http://**nt*.lycos.it/v**/dl.exe Tenga is a classic appending virus that increases the size of infected files by 3 KB.The virus starts a thread to enumerate all files – if the file extension matches *.exe the virus tries to infect this file. That said: The virus will only infect Executable files – Screensaver files with the file extension .SCR are not affected. The virus attaches itself to the end of host files.
The virus creates its own Mutex if one virus instance is actively running
Bugger.. now i have to reinstall everything i own. Although this virus may be a low level threat because it can easily be contained due to its local damage causing virus unable to spread to other pc's but still .. anyone getting this virus is a pain in the ass because u have to reinstall every single .exe u got. I prefer to get infected by a worm rather than this piece of shit. Ah well ... just bought an original antivirus now. -_-