nikita69
10-19-2003, 05:47 AM
W32.Cesca is a virus designed to spread through floppy disks. It periodically copies itself to the floppy using the file names that are randomly chosen from a list that the virus carries.
This threat is written in the Microsoft programming language.
Type: Virus
Infection Length: 61,440 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Systems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX
Threat Assesment
Wild:
* Number of infections: 0 - 49
* Number of sites: 0 - 2
* Geographical distribution: Low
* Threat containment: Easy
* Removal: Easy
Distribution
* Subject of email: n/a
* Name of attachment: n/a
Technical Detail
When W32.Cesca is executed, it does the following,
1. Periodically attempts to copy itself to the floppy drive. The file names are randomly chosen from the following list:
* A:\Pamela.exe
* A:\PracticaIII.exe
* A:\Documentomercantil9.exe
* A:\Melisa.exe
* A:\Cartas.exe
* A:\Lennon.exe
* A:\Macros.exe
* A:\Codific_visual.exe
* A:\Avril Lavigne.exe
* A:\Trinity.exe
* A:\Morfeo.exe
* A:\Neo.exe
2. May copy itself as the following:
* C:\Windows\Menú Inicio\Programas\Inicio\systems.exe
* C:\Windows\system\normal.exe
* C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\systems.exe
* C:\Archivos de programa\Microsoft Office\Office\WINWORD.EXE
* C:\Archivos de programa\Microsoft Office\Office10\winword.exe
This threat is written in the Microsoft programming language.
Type: Virus
Infection Length: 61,440 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Systems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX
Threat Assesment
Wild:
* Number of infections: 0 - 49
* Number of sites: 0 - 2
* Geographical distribution: Low
* Threat containment: Easy
* Removal: Easy
Distribution
* Subject of email: n/a
* Name of attachment: n/a
Technical Detail
When W32.Cesca is executed, it does the following,
1. Periodically attempts to copy itself to the floppy drive. The file names are randomly chosen from the following list:
* A:\Pamela.exe
* A:\PracticaIII.exe
* A:\Documentomercantil9.exe
* A:\Melisa.exe
* A:\Cartas.exe
* A:\Lennon.exe
* A:\Macros.exe
* A:\Codific_visual.exe
* A:\Avril Lavigne.exe
* A:\Trinity.exe
* A:\Morfeo.exe
* A:\Neo.exe
2. May copy itself as the following:
* C:\Windows\Menú Inicio\Programas\Inicio\systems.exe
* C:\Windows\system\normal.exe
* C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\systems.exe
* C:\Archivos de programa\Microsoft Office\Office\WINWORD.EXE
* C:\Archivos de programa\Microsoft Office\Office10\winword.exe