fun with a virus

[Red Squirrel]

So I got this virus email, wondered why my email server did not catch it, so I open the email, unzip the attachement to my desktop and scan it with AVG, still did not catch it. It had a default ms picture icon but was an EXE file.

PW_Klass.Pic.packed-bitmap.exe

Now would you open that? Well I did. (in VMware )

Does not really do much but an error dialog and does some crazy processing, it's most likely searching for a specific program that it can exploit or something. It also seems to mess with the registry a little but yeah, that's about it.

Could be that it's a network virus too, but I did not have a isolated network to test it on so it was a non networked machine.






Archived topic from Iceteks, old topic ID:3804, old post ID:30814