Content

W32/Tarit.worm

Type
Virus
SubType
P2P Worm
Discovery Date
05/19/2003
Length
28,672 bytes
Minimum DAT
4267 (05/28/2003)
Updated DAT
4267 (05/28/2003)
Minimum Engine
5.1.00
Description Added
05/20/2003
Description Modified
05/21/2003 1:39 AM (PT)
Risk Assessment
Corporate User
Low
Home User
Low

Tab Navigation

Characteristics

This worm spreads purely through Kazaa networks by making multiple copies of itself into the default shared folder of Kazaa. This path is hardcoded as:

C:\PROGRAM FILES\KAZAA\MY SHARED FOLDER

Users who use the Kazaa software are at risk. The following filenames are used by this worm:

  • Ali G -Track13.wma.exe
  • Ali G Gives Respect.Xvid.AVI.mpg.exe
  • Ali G in the House.Divx.AVI.mpg.exe
  • Ali G_-_Secret Track.mp3.exe
  • AMD Upclocker Inst.exe
  • Amd VS Intel Full.exe
  • AMD64 Hammer Information_Setup.exe
  • ATB - Track07.ogg.exe
  • Austin Powers Gold Member.DCF32.AVI.dat.exe
  • Beavis & Butthead do America.Xvid.AVI.mpg.exe
  • Bedazzled.Mpeg4.AVI.mpg.exe
  • Black & White Installation.exe
  • Blank & Jones -_Track09.wma.exe
  • Bump 12_- Track03.ogg.exe
  • Bump 12_-_Secret Track.ogg.exe
  • Bump HardHouse 3_- Track09.wma.exe
  • Capella - Track03.wma.exe
  • Cruel Intentions 3.DCF32.AVI.avi.exe
  • Dance E-Jay 1_.exe
  • Dance E-Jay 1_Setup.exe
  • Dance E-Jay 3_Inst.exe
  • Dance E-Jay 4 Installation.exe
  • DareDevil.Mpeg4.VCD.avi.exe
  • DareDevil.Xvid.SVCD.dat.exe
  • Deep Purple_- Track06.mp3.exe
  • Dixie Chicks - Southpark mix.mp3.exe
  • DVD Ripper Installation.exe
  • DVD Ripper_Installation.exe
  • Ecstasy_-_Southpark mix.ogg.exe
  • Eminem -_Track12.mp3.exe
  • ESP 1_- Chipmunc mix.wma.exe
  • ESP 2 - Simpsons mix.mp3.exe
  • ESP 3 - Track03.wma.exe
  • Free ISP .exe
  • Free ISP Full.exe
  • Hackers II.Divx.VCD.dat.exe
  • Hackers II.Mpeg4.SVCD.dat.exe
  • Harry Potter 01.Divx.VCD.dat.exe
  • Harry Potter 01.Mpeg4.AVI.mpg.exe
  • Hits 2000 - Track04.mp3.exe
  • Hits 2002_-_Track04.wav.exe
  • Internet Overclocker_.exe
  • Internet Overclocker_Full.exe
  • Worm.CodeRed Inst.exe
  • JackAss - The Movie.Divx.SVCD.dat.exe
  • JackAss - The Movie.Mpeg4.AVI.avi.exe
  • Janet Jackson_-_Chipmunc mix.ogg.exe
  • Jay and Silent bob.DCF32.VCD.dat.exe
  • Jay and Silent bob.Divx.VCD.mpg.exe
  • Jay and Silent bob.Xvid.DVD.mpg.exe
  • Koleske_-_Track04.wav.exe
  • LameMp3 Encoder_Installation.exe
  • Liberty stand still.Divx.AVI.dat.exe
  • Lord of the Rings - Fellowship of the ring.Xvid.SVCD.dat.exe
  • Lord of the Rings - Two Towers.DCF32.SVCD.dat.exe
  • Lord of the Rings - Two Towers.Divx.DVD.mov.exe
  • Lovemaking_- Track06.ogg.exe
  • Mcafee Antivirus_Full.exe
  • Metal E-Jay 1_Setup.exe
  • Metal E-Jay 3_Installation.exe
  • Michael Jackson - Radio mix.wma.exe
  • Modem Overclocker Full.exe
  • Norton Antivirus 2003_Setup.exe
  • Paul van Dyk -_Track12.wma.exe
  • PC-Cillin 2003 Installation.exe
  • Pearl Harbor.Xvid.SVCD.avi.exe
  • Pearl Harbor.Xvid.SVCD.mov.exe
  • Playstation XP.NT.2K.9x Emulator_.exe
  • Queen -_Track10.wma.exe
  • R&B Mix 1 - Chipmunc mix.mp3.exe
  • R&B Mix 4 -_You Hate.mp3.exe
  • R&B Mix 4_- Secret Track.ogg.exe
  • Resident Evil.DCF32.SVCD.mov.exe
  • Resident Evil.Divx.AVI.mov.exe
  • Resident Evil.Divx.DVD.dat.exe
  • Rollerball.Xvid.AVI.dat.exe
  • Rollerball.Xvid.AVI.mpg.exe
  • Ronan -_Track05.wma.exe
  • Santana_-_Radio mix.ogg.exe
  • Sash -_Track13.ogg.exe
  • Silver Metal 1 -_You Hate.ogg.exe
  • Tal Bachman - Track08.wma.exe
  • Techno E-Jay 2 .exe
  • Techno E-Jay 3 Full.exe
  • Techno E-Jay 3 Installation.exe
  • The Animatrix.DCF32.SVCD.dat.exe
  • The Animatrix.Divx.DVD.avi.exe
  • The Animatrix.Xvid.DVD.avi.exe
  • The Matrix 2.Mpeg4.DVD.mpg.exe
  • The New Guy.Divx.VCD.mpg.exe
  • The Ring.Divx.SVCD.dat.exe
  • Total E-Jay 1 Full.exe
  • TotaE-Jay 1_.exe
  • U2_-_Simpsons mix.ogg.exe
  • World of Dance 1 -_Track07.mp3.exe
  • World of Dance 5 - You Hate.wav.exe

Symptoms

The presence of the above files.

Method of Infection

The user gets infected upon downloading any of the above files and executing it.

Removal

All Users :
Use specified engine and DAT files for detection and removal.

If you are using P2P software (Kazaa, Gnotella, Bearshare, Morpheus, eDonkey, eMule, etc.) be very careful with downloaded executable files.

Please make sure that scanning of compressed files is enabled. Always scan downloaded files with the latest DATs in program heuristic mode.

Additional Windows ME/XP removal considerations

Variants

Variants

    N/A

All Information

Overview -

This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.

Aliases

  • Bloodhound.w32.5

Characteristics

Characteristics -

This worm spreads purely through Kazaa networks by making multiple copies of itself into the default shared folder of Kazaa. This path is hardcoded as:

C:\PROGRAM FILES\KAZAA\MY SHARED FOLDER

Users who use the Kazaa software are at risk. The following filenames are used by this worm:

  • Ali G -Track13.wma.exe
  • Ali G Gives Respect.Xvid.AVI.mpg.exe
  • Ali G in the House.Divx.AVI.mpg.exe
  • Ali G_-_Secret Track.mp3.exe
  • AMD Upclocker Inst.exe
  • Amd VS Intel Full.exe
  • AMD64 Hammer Information_Setup.exe
  • ATB - Track07.ogg.exe
  • Austin Powers Gold Member.DCF32.AVI.dat.exe
  • Beavis & Butthead do America.Xvid.AVI.mpg.exe
  • Bedazzled.Mpeg4.AVI.mpg.exe
  • Black & White Installation.exe
  • Blank & Jones -_Track09.wma.exe
  • Bump 12_- Track03.ogg.exe
  • Bump 12_-_Secret Track.ogg.exe
  • Bump HardHouse 3_- Track09.wma.exe
  • Capella - Track03.wma.exe
  • Cruel Intentions 3.DCF32.AVI.avi.exe
  • Dance E-Jay 1_.exe
  • Dance E-Jay 1_Setup.exe
  • Dance E-Jay 3_Inst.exe
  • Dance E-Jay 4 Installation.exe
  • DareDevil.Mpeg4.VCD.avi.exe
  • DareDevil.Xvid.SVCD.dat.exe
  • Deep Purple_- Track06.mp3.exe
  • Dixie Chicks - Southpark mix.mp3.exe
  • DVD Ripper Installation.exe
  • DVD Ripper_Installation.exe
  • Ecstasy_-_Southpark mix.ogg.exe
  • Eminem -_Track12.mp3.exe
  • ESP 1_- Chipmunc mix.wma.exe
  • ESP 2 - Simpsons mix.mp3.exe
  • ESP 3 - Track03.wma.exe
  • Free ISP .exe
  • Free ISP Full.exe
  • Hackers II.Divx.VCD.dat.exe
  • Hackers II.Mpeg4.SVCD.dat.exe
  • Harry Potter 01.Divx.VCD.dat.exe
  • Harry Potter 01.Mpeg4.AVI.mpg.exe
  • Hits 2000 - Track04.mp3.exe
  • Hits 2002_-_Track04.wav.exe
  • Internet Overclocker_.exe
  • Internet Overclocker_Full.exe
  • Worm.CodeRed Inst.exe
  • JackAss - The Movie.Divx.SVCD.dat.exe
  • JackAss - The Movie.Mpeg4.AVI.avi.exe
  • Janet Jackson_-_Chipmunc mix.ogg.exe
  • Jay and Silent bob.DCF32.VCD.dat.exe
  • Jay and Silent bob.Divx.VCD.mpg.exe
  • Jay and Silent bob.Xvid.DVD.mpg.exe
  • Koleske_-_Track04.wav.exe
  • LameMp3 Encoder_Installation.exe
  • Liberty stand still.Divx.AVI.dat.exe
  • Lord of the Rings - Fellowship of the ring.Xvid.SVCD.dat.exe
  • Lord of the Rings - Two Towers.DCF32.SVCD.dat.exe
  • Lord of the Rings - Two Towers.Divx.DVD.mov.exe
  • Lovemaking_- Track06.ogg.exe
  • Mcafee Antivirus_Full.exe
  • Metal E-Jay 1_Setup.exe
  • Metal E-Jay 3_Installation.exe
  • Michael Jackson - Radio mix.wma.exe
  • Modem Overclocker Full.exe
  • Norton Antivirus 2003_Setup.exe
  • Paul van Dyk -_Track12.wma.exe
  • PC-Cillin 2003 Installation.exe
  • Pearl Harbor.Xvid.SVCD.avi.exe
  • Pearl Harbor.Xvid.SVCD.mov.exe
  • Playstation XP.NT.2K.9x Emulator_.exe
  • Queen -_Track10.wma.exe
  • R&B Mix 1 - Chipmunc mix.mp3.exe
  • R&B Mix 4 -_You Hate.mp3.exe
  • R&B Mix 4_- Secret Track.ogg.exe
  • Resident Evil.DCF32.SVCD.mov.exe
  • Resident Evil.Divx.AVI.mov.exe
  • Resident Evil.Divx.DVD.dat.exe
  • Rollerball.Xvid.AVI.dat.exe
  • Rollerball.Xvid.AVI.mpg.exe
  • Ronan -_Track05.wma.exe
  • Santana_-_Radio mix.ogg.exe
  • Sash -_Track13.ogg.exe
  • Silver Metal 1 -_You Hate.ogg.exe
  • Tal Bachman - Track08.wma.exe
  • Techno E-Jay 2 .exe
  • Techno E-Jay 3 Full.exe
  • Techno E-Jay 3 Installation.exe
  • The Animatrix.DCF32.SVCD.dat.exe
  • The Animatrix.Divx.DVD.avi.exe
  • The Animatrix.Xvid.DVD.avi.exe
  • The Matrix 2.Mpeg4.DVD.mpg.exe
  • The New Guy.Divx.VCD.mpg.exe
  • The Ring.Divx.SVCD.dat.exe
  • Total E-Jay 1 Full.exe
  • TotaE-Jay 1_.exe
  • U2_-_Simpsons mix.ogg.exe
  • World of Dance 1 -_Track07.mp3.exe
  • World of Dance 5 - You Hate.wav.exe

Symptoms

Symptoms -

The presence of the above files.

Method of Infection

Method of Infection -

The user gets infected upon downloading any of the above files and executing it.

Removal -

Removal -

All Users :
Use specified engine and DAT files for detection and removal.

If you are using P2P software (Kazaa, Gnotella, Bearshare, Morpheus, eDonkey, eMule, etc.) be very careful with downloaded executable files.

Please make sure that scanning of compressed files is enabled. Always scan downloaded files with the latest DATs in program heuristic mode.

Additional Windows ME/XP removal considerations

Variants

Variants -

    N/A