Group: microsoft.public.windowsxp.configuration_manage · Group Profile · Search for Virusencyclo in microsoft.public.windowsxp.configuration_manage
Author: Wesley Vogel
Date: Aug 25, 2006 16:56
Regarding this line... These files contain the string MZ so that this worm can disable the following Windows tool applications: from.... WORM_ALCAN.A - Technical details http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_ALCAN.A&VSect=T It meant that the .com files mentioned have the MZ string. I.E. CMD.COM, NETSTAT.COM, PING.COM, REGEDIT.COM, TASKKILL.COM,TASKLIST....
|