Content

DAT Readme

Download the latest anti virus definitions for McAfee® VirusScan®. Ensure your McAfee® product contains the most up-to-date detection and prevention.
http://www.mcafee.com/apps/downloads/security_updates/dat.asp

DAT Version 4241
DAT Release Date 01/08/2003
Threats Detected 63163
New Detections 153
Enhanced Detections 912

Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

Noteworthy threats are those that had an Avert risk assessment of Low-Profiled, Medium, Medium-On-Watch, High, or High-Outbreak at the time of DAT release.

Noteworthy Threats:

Name Corporate Risk Assessment Home Risk Assessment
W32/Lirva.a@MM Low-Profiled Low-Profiled

New Detections:

Internet Worm (2)
  E-mail worm (1)
    W32/FatCat@MM
  Internet Worm (1)
    W32/Revocer@MM
Program (90)
   (3)
    VSource
    Generated.INF
    Generator.INF
  Configurator (1)
    Keylog-SC.cfg
  Dialer (2)
    PornDial-120
    PornDial-118
  Downloader (1)
    MP3Search.ldr
  Keylogger (1)
    Keylog-ABSpy.v5
  Malware Tool (63)
    VTool/xxe
    VTool/vzu
    VTool/vgn3
    VTool/vgn1
    VTool/vct4
    VTool/vem
    VTool/vct2
    VTool/tre
    VTool/zom
    VTool/xax
    VTool/voi
    VTool/vgn2
    VTool/vct3
    VTool/vct1
    VTool/tpe2
    VTool/tpe1
    VTool/sta
    VTool/siz
    VTool/sic
    VTool/sfx
    VTool/sbr2
    VTool/sbr1
    VTool/sal
    VTool/rng
    VTool/rdc
    VTool/rda2
    VTool/rda1
    VTool/rab2
    VTool/rab1
    VTool/paw3
    VTool/paw1
    VTool/nsp
    VTool/mag
    VTool/hwi
    VTool/fak
    VTool/duk2
    VTool/dav
    VTool/dat2
    VTool/dam
    VTool/dab
    VTool/tfi
    VTool/pew
    VTool/paw2
    VTool/pat
    VTool/mbc
    VTool/gfx
    VTool/exp
    VTool/duk1
    VTool/dat3
    VTool/dat1
    VTool/cry
    VTool/cou
    VTool/c2t
    VTool/bur
    VTool/b2p
    VTool/azc
    VTool/atr
    VTool/aso
    VTool/api
    VTool/ant
    VTool/act3
    VTool/act2
    VTool/act1
  Self-extracting archive (1)
    Keylog-SC.sfx
  Win32 (18)
    WVTool/isp
    WVTool/iml
    WVTool/hpr
    WVTool/gsh
    WVTool/fvw
    WVTool/twv
    WVTool/spn
    WVTool/mng
    WVTool/gpr
    WVTool/eyb
    WVTool/deb
    WVTool/mme
    WVTool/mdp
    WVTool/lpf
    WVTool/jef
    WVTool/etr
    Hiddukel
    HideExec
Trojan (30)
   (1)
    TBS
  Application extension (3)
    Spy-Hidukel.dll
    PWS-Rimd.dll
    BackDoor-GQ.dll
  Boot (1)
    Killpar.c
  Dialer (1)
    PornDial-119
  Dropper (1)
    PWS-GWGhost.dr
  File Deletion (1)
    QDel359
  Generic (2)
    Keylog-SCLog.gen
    BackDoor-AOI.gen
  Intended Malware Tool Source (1)
    Bat/aam.kit.src.intd
  Partition (1)
    Killpar
  Password (1)
    PWS-Rimd
  Password Stealer (6)
    PWS-WMSender
    PWS-RedZone
    PWS-QQEye
    PWS-RunEscape
    PWS-QQThief
    PWS-Keybo
  Remote Access (4)
    IRC/Backdoor.e
    BackDoor-AOH
    BackDoor-AOJ
    BackDoor-AOI
  Script (3)
    Killpar.c.bat
    BackGate.reg
    BackGate.reg.f
  Win32 (4)
    ServU-Daemon
    W32/Manfool
    Spy-Hidukel
    DDoS-Socomigo
Virus (31)
   (6)
    BootDr101
    BootDr81
    BootDr75
    ARCV.869
    HLLT.8448
    HLLT.7776b
  E-mail (2)
    W32/Lirva.a@MM
    W32/Lirva.c@MM
  E-mail worm (3)
    W32/Yaha.m@MM
    W32/Lirva.gen@MM
    W32/Orfina@MM
  Email (4)
    W32/MyLife@MM
    W32/Wangy@MM
    W32/Revocer.b@MM
    W32/Revocer.a@MM
  Intended (1)
    VBS/Pookins.intd
  Intended Malware Tool Source (1)
    Bat/aal.kit.src.intd
  Internet Worm (1)
    W32/Etern.worm
  Malware Tool (1)
    Bat/har.kit
  Script (2)
    Bat/spi
    Bat/inv
  VBScript worm (1)
    VBS/Renalo@MM
  Win32 (2)
    W32/Yaha.m
    W32/Noreason
  Worm (7)
    W32/Tulu.worm
    W32/Randir.worm
    W32/Opaserv.worm.o
    W32/Spear.worm.j
    W32/Lolol.f.worm
    W32/Joggle.worm
    W32/Alkin.worm

Enhanced Detections:

Heuristics (1)
  Trojan (1)
    New IRC/Backdoor
Internet Worm (10)
  - (1)
    W32/Cblade.worm.gen
  E-mail (1)
    W95/Troodon@M
  Intended (1)
    W32/Rast.2060
  MAPI (1)
    W32/ProLin@MM
  mIRC Worm (1)
    IRC/Prophecy@MM
  Trojan (1)
    IRC/Girls.worm
  Win32 (4)
    W32/Klez.i@MM
    W32/Bomex
    W32/Klez.e@MM
    W32/Klez.h@MM
Program (3)
  - (1)
    Pepe-bar
  Application extension (2)
    Realtime-Spy.dll
    Keylog-SC.dll
Trojan (68)
   (4)
    Fono.a
    Youzer
    Fono.b
    AX/Slingshot
  Application extension (1)
    IRC/Flood.l.dll
  Com file (1)
    W32/Mypics.com
  Configuration settings (2)
    W32/MsInit.ini
    W32/Cheval.ini
  Demonstration (1)
    W32/TLS.demo
  Dropper (12)
    IRC/Flood.k.dr
    IRC/Flood.b.dr
    IRC/Flood.ab.dr
    IRC/Flood.d.dr
    AVP32Patch.dr
    AVClose.dr
    IRC/Flood.ar.dr
    IRC/Flood.ai.dr
    IRC/Flood.ac.dr
    IRC/Flood.v.dr
    IRC/Flood.j.dr
    IRC/Flood.g.dr
  Generic (1)
    JS/Seeker.gen.e
  Heuristic (1)
    New BackDoor5
  Internet Relay Chat (19)
    IRC/Flood.ar
    IRC/Flood.au
    IRC/Flood.be
    IRC/Flood.ay
    IRC/Flood.bg
    IRC/Flood.bj
    IRC/Flood.h
    IRC/Flood.aw
    IRC/Flood.ah
    IRC/Flood.aa
    IRC/Flood.u
    IRC/Flood.q
    IRC/Flood.m
    IRC/Flood.ax
    IRC/Flood.al
    IRC/Flood.ag
    IRC/Flood.z
    IRC/Flood.w
    IRC/Flood.d
  mIRC client (2)
    IRC/Flood.ai.mirc
    IRC/Flood.v.mirc
  mIRC Worm (1)
    IRC/Jane.worm
  Password Stealer (1)
    PWS-Murka
  Plugin component (1)
    W32/PGN.plugin
  Remote Access (2)
    Backdoor-AAG
    BackDoor-W
  Script (10)
    IRC/Flood.j.bat
    VBS/Flood.bh
    W32/Hunch.bat
    W32/Stars.bat
    W32/Mypics.bat
    W32/Funpo.bat
    W32/FragLite.vbs
    W32/Adult.bat
    BackGate.reg.b
    BackGate.reg.a
  Win31 (4)
    Angelus.f
    Angelus.b
    Angelus.e
    Angelus.a
  Win32 (4)
    W32/CodeRed.c
    MouseMunch
    W32/Sysnom.dbg
    AVP32Patch
  Win9x (1)
    W95/Shoerec
Virus (830)
   (18)
    WHLP/Dream
    HLLT.7776
    BootDr216
    BootDr188
    W31/Klon.12800
    W31/Klon.13056
    SWF/LFM.926.a
    WinWorm.pif
    Winstart.900/901
    Winstart.447
    Winstart.296
    Winstart.297
    Readme.1077
    Moridin.scr
    Messiah.msg
    SWF/LFM.926.b
    Apuli.v
    Eight Tunes.1971
  Application extension (4)
    W32/Genu.dll
    W95/Ihsix.dll
    W32/Finaldo.dll
    W32/Demig.dll
  Application extension Droppe (1)
    W32/Mix.dll.dr
  Application extension Email (5)
    W32/Ska.dll@M
    W32/Sabia.dll@M
    W32/IceCube.dll.a@M
    W32/IceCube.dll.b@M
    W95/MTX.dll@M
  Application extension Worm (2)
    W32/Zoek.worm.dll
    W32/Datom.worm.dll
  Com file (1)
    W32/Demig.com
  Companion (10)
    W32/HLL.cmp.66048
    W95/Blarney.cmp
    W95/Spawn.cmp
    W32/Jerk.cmp
    W32/HLL.cmp.321536
    W32/Hoa.cmp.16896
    W95/Hong.cmp.4096
    W32/Waso.cmp
    W32/Pilsen.cmp.4096
    W32/Peana.cmp
  Configuration settings (7)
    W32/Merkur.ini
    W32/Loa.ini
    W95/Ihsix.ini
    W32/Crypto.ini
    IRC/Wandol.ini
    UPD.ini
    Messiah.ini
  Configuration settings Plugi (1)
    W95/Babylonia.plugin.ini
  Configuration settings Worm (1)
    IRC/STD.worm.ini
  Damaged (14)
    W32/Shaitan.3550.dam
    W95/Padania.dam
    W32/Boder.dam
    W95/Atav.1939.dam
    W95/Klunky.dam
    W95/Atav.2073.dam
    W32/Zikam.4236.dam
    W32/Zawex.dam
    W32/Savior.dam
    W95/Memorial.dam
    Evyl.dam
    W32/Cheval.dam
    W95/Arianne.1022dr.dam
    IRC/Overnuke.dam
  Damaged Script (1)
    W32/Rhapsody.bat.dam
  Damaged Worm (1)
    Homer.worm.dam
  Demonstration (1)
    W32/Npe.demo
  Downloader Worm (2)
    W32/SoftSix.worm.b.ldr
    W32/SoftSix.worm.a.ldr
  Dropper (91)
    W95/Wg.12288.dr
    W95/Ussu.dr
    W32/HLLP.Txt.b.dr
    W32/Chiton.e.dr
    W32/HLLP.Txt.c.dr
    W32/HLLP.Txt.a.dr
    W32/Henky.Sanaz.dr
    Eight Tunes.dr
    W95/Roma.b.dr
    W95/Jacky.dr
    W95/Yoyo.653.dr
    W32/Undertake.dr
    W95/Working.dr
    W95/Tick.dr.c
    W32/Rhapsody.dr
    W95/KME.c.dr
    W95/Tick.dr.e
    W95/Tick.dr.d
    W95/Tick.dr.a
    W95/Sv.2332.dr
    W32/Priest.dr
    W32/Parvo.dr
    W95/Padania.dr
    W32/NGVCK.dr
    W95/Tick.dr.b
    W95/Sv.2560.dr
    W32/Ruff.4864.dr
    W95/Prizzy.dr
    W32/Pluma.dr
    W95/Nathan.dr
    W32/Mix.dr
    W32/Mental.dr
    W95/Matrix.dr
    W95/Lovesong.dr
    W95/KME.b.dr
    W32/Fighter.dr
    W95/Kenston.dr
    W95/CIH.dr
    W32/Boder.dr
    W95/Atav.1939.dr
    W32/Bender.dr
    W32/Akez.dr
    W95/Ramdile.dr
    W32/Fosforo.dr.c
    W32/Doser.4539.dr
    W95/Lme.dr
    W32/CTX.dr
    W32/Bolzano.2630.dr
    W32/Bolzano.dr
    W95/Zperm.dr
    W32/Vulcano.dr
    W16/Winsurf.dr
    W32/Etap.dr
    W32/Bolzano.2216.dr
    W32/Bolzano.5396.dr
    W32/Spit.8192.dr
    W32/Zikam.dr
    W16/WinVir.dr
    W32/Sentral.dr
    W32/Tuareg.dr
    W32/Shogun.dr
    W32/Ruff.dr
    W32/NGVCK.c.dr
    W32/Navidad.dr
    W95/Lizard.dr.5633
    W95/Invir.dr
    W32/Nedal.dr
    W32/Molly.dr
    W95/Miam.dr
    W95/Lizard.dr
    W95/Libertine.dr
    DUNpws.ik.dr
    Arica@MM.dr
    W95/Henky.Kaido.dr
    W95/Henky.Morgue.dr
    W32/Giri.dr
    W32/Evol.dr
    W95/Etymo.dr
    W32/Enviar.dr
    W32/Donut.dr
    W95/Dead.dr
    W32/CodeGreen.dr
    W95/CIH.dr.1040
    W32/Chiton.b.dr
    W32/Chiton.c.dr
    W32/Chiton.a.dr
    W32/Cecile.dr
    W32/Cabanas.dr
    W95/Bistro.dr
    W32/Alma.dr
    Toadie.dropped.450
  Dropper Intended (6)
    W32/NGVCK.c.dr.intd
    W32/Godoh.dr.intd
    W32/Frone.dr.intd
    W95/CIH.dr.973.intd
    W95/CIH.dr.1230.intd
    W95/CIH.dr.intd
  Dropper Parasitic (1)
    W95/Vlades.cav.dr
  Dropper Plugin component (1)
    W95/Babylonia.plugin.dr
  Dropper Script (2)
    W32/Mix.bat.dr
    W95/CIH.bat.dr
  Dropper Worm (1)
    W16/Slyde.worm.dr
  E-mail (8)
    W32/Naked@MM
    W95/Linong@MM
    W32/Mari@MM
    W32/Eira@MM
    W32/Shrew@MM
    W32/Hunch.c@MM
    W32/Onamu@MM
    W32/Sowsat@MM
  E-mail worm (5)
    W32/Wauzy@MM
    W32/Hunch.h@MM
    W32/Higuy@MM
    W32/Liac@MM
    W32/Bajar.b@MM
  Email (66)
    W32/Hunch.j@MM
    W95/Sintesys@MM
    W32/Narcis@MM
    W32/Tossed@MM
    W32/Silver@MM
    W32/Pnguin@MM
    W32/Hunch.g@MM
    W32/Hunch.e@MM
    W32/Hunch.d@MM
    W32/Hunch.b@MM
    W32/Heidi.a@MM
    W32/Hunch.f@MM
    W32/Heidi.b@MM
    W32/DDoS-Apbot@MM
    W32/TopSec@MM
    W32/Hunch.i@MM
    W95/MTX@M
    W32/Wonna@MM
    W32/Kitro.m@MM
    W32/Recerv.b@MM
    W32/Recerv.a@MM
    Bat/Fable@MM
    JS/Nilit@MM
    W32/ExploreZip@MM
    W32/Duksten.h@MM
    W32/Toal.a@MM
    W32/Kameral@MM
    W32/Viled@MM
    W32/Trilisa.i@MM
    W32/Trilisa.g@MM
    W32/Trilisa.d@MM
    W32/Trilisa.b@MM
    W32/Trilisa.f@MM
    W32/Trilisa.e@MM
    W32/Solvina@MM
    W32/Vampa@MM
    W32/Trilisa.k@MM
    W32/Trilisa.h@MM
    W32/Trilisa.c@MM
    W32/Trilisa.a@MM
    W32/Sabia@M
    W32/RunFtp@MM
    W16/Redteam.c@MM
    W16/Redteam.b@MM
    W16/Redteam.a@MM
    W32/Nymph@MM
    W32/Redesi@MM
    W32/Klez.f@MM
    W32/Honey@MM
    IRC/Docirc@MM
    W32/Gift.c@MM
    W32/Gift.b@MM
    W32/Gift.a@MM
    W32/Fuflash@MM
    W32/Chir.b@MM
    W32/Chir.a@MM
    W32/BleBla@MM
    W95/Android@M
    Toadie.7800b@MM
    Toadie.6810@MM
    Toadie.6585@MM
    Toadie.9100@MM
    Toadie.7800a@MM
    Heybro@MM
    VBS/Dossier@MM
    W32/Comical@MM
  Email Generic (8)
    W32/Navidad.gen@M
    W32/ExploreZip.gen@M
    W32/Onamu.gen@MM
    W32/Trilisa.gen@MM
    W32/White.gen@M
    W32/SirCam.gen@MM
    W32/Nimda.gen.b@MM
    W32/Repah.gen@MM
  Email Generic Worm (1)
    W32/NewApt.worm.gen@MM
  Email Self-extracting archiv (1)
    W32/RunFtp.sfx@MM
  Email Worm (1)
    W32/ExploreZip.worm.pak.c@M
  File Infector (5)
    W32/Nedal
    WinVir
    W32/HLL.ow.24590
    W32/Themba
    W32/Donut
  Floppy Worm (2)
    W95/Demo.8192
    W32/Winfig.worm
  Generic (25)
    W32/Vedex.gen
    W95/Xine.gen
    W32/Rhapsody.gen
    W32/Priest.gen
    W95/Molly.gen
    W32/Bika.gen
    W32/Fatuous.gen
    W32/Bolzano.gen.a
    W95/Zombie.gen
    W95/Yurn.gen
    W32/Wanhope.gen
    W32/Spit.8192.gen
    W95/Whog.gen
    W95/Score.gen
    W95/VIP.gen
    W95/Putita.gen.a
    W32/Perrun.gen
    W32/Press.gen
    W95/Merinos.gen
    IRC/Lepha.gen
    W32/Giri.gen.b
    W32/Giri.gen.a
    W95/Ditto.gen
    W95/Damm.gen
    UPD.gen
  Generic Overwriting (1)
    W32/Hadefix.ow.gen
  Generic Script (1)
    W32/Tossed.vbs.gen
  Generic Worm (4)
    W32/Leave.worm.gen.j
    W32/Mellon.worm.gen
    W32/QAZ.worm.gen
    W32/Choke.worm.gen
  HTML document (4)
    W32/Sponge.html
    W32/Gokar.htm
    W32/Alcop.htm
    Messiah.htm
  Intended (11)
    W32/Hunch.intd
    W32/Npe.intd
    W32/Undertake.intd
    W95/Klunky.a.intd
    W95/LS.intd
    W95/Vivic.intd
    W95/Spaces.1096.intd
    W32/Evyl.c.intd
    W32/Evyl.b.intd
    W32/Evyl.a.intd
    W95/Cic.intd
  Internet Relay Chat (17)
    IRC/Krazyb
    IRC.Toadie
    IRC/Overnuke.a
    IRC.Bolzano
    IRC/Muzik
    IRC/Milbug.a
    IRC/Gorum
    IRC/Allegro.a
    IRC/Thea
    IRC/Wandol
    IRC/Overnuke.b
    IRC/Milbug.b
    IRC/Lepha.b
    IRC/Gnosis
    IRC/Fungs
    IRC/Energy
    IRC/Allegro.b
  Internet Worm (8)
    IRC/Drimwa
    W32/Cezdas
    W32/Datom.worm
    W32/Myba@mm
    W32/Hello.worm
    W32/Leave.worm.gen
    W32/Hai.worm
    W32/CodeBlue.worm
  Joke (1)
    Thorin.joke
  Keylogger (1)
    W32/KeyLog-Idim
  Malware Tool (1)
    W32/PME.kit
  multipartite (1)
    W95/Fono.mp.vxd
  Overwriting (21)
    W95/Zmk.ow
    W32/Hadefix.ow.g
    W32/Hadefix.ow.f
    W32/HLL.ow.22528
    W32/Assic.ow
    W32/Butool.b.ow
    W32/Tarex.ow
    W32/Sill.ow
    W32/Pers.ow
    W32/Morgoth.ow.2560
    W32/Htrip.ow
    W32/HLL.ow.52736
    W32/HLL.ow.20480a
    W32/HLL.ow.17408
    W32/HLL.ow.ANT
    W32/Hadefix.ow.d
    W32/Hadefix.ow.e
    W32/Hadefix.ow.c
    W32/Hadefix.ow.b
    W32/Hadefix.ow.a
    W32/Harriet.ow.18210
  P2P Worm (1)
    W32/Lolol.c.worm
  Parasitic (40)
    W32/HLLP.Txt.c
    W32/HLLP.Txt.a
    W32/HLLP.Txt.b
    W32/HLLP.Jim
    W32/HLLP.Imel
    W95/Zoual.cav
    W95/Radix.cav.435
    W95/Radix.cav.405
    W95/Radix.cav.402a
    W95/Radix.cav.402b
    W95/Radix.cav.403
    W95/Argos.cav.334
    W32/HLLP.Karimex
    W95/Vlades.cav.b
    W95/Vlades.cav.a
    W95/Trix.750.cav
    W95/Trix.817.cav
    W95/Trix.844.cav
    W95/Trix.909.cav
    W32/Lamy.cav.1751
    W32/Lamy.cav.1751dr
    W32/Lamy.cav.1813
    W32/Lamy.cav.1813dr
    W32/HLLP.Delvi
    W32/HLLP.17408d
    W32/HLLP.18431b
    W32/HLLP.18431a
    W32/HLLP.40960
    W32/HLLP.12288
    W32/HLLP.17408c
    W32/HLLP.17408b
    W32/HLLP.21504intd
    W32/HLLP.18432
    W32/HLLP.17408a
    W32/Dodo.cav
    W95/Argos.cav.387
    W95/Argos.cav.310
    W95/Argos.cav.402
    W95/Argos.cav.328
    W95/Apop.cav
  Plugin component (3)
    W95/Babylonia.plugin.email
    W95/Babylonia.plugin.txt
    W32/Unis.plugin
  Plugin component Script (1)
    W95/Babylonia.plugin.bat
  Script (31)
    VBS/Mix
    W32/Merkur.bat
    Thorin.script
    Bat/Nahata
    W32/Kamil.b.bat
    W32/Heffer.reg
    W95/MTX.bat
    VBS/Scrambler
    W32/Rhapsody.bat
    W32/Redesi.bat
    IRC/Poison.vbs
    W32/MsWorld.bat
    W32/Leo.vbs
    W32/HLLP.Giwin.bat
    W32/HLLP.53764.bat
    W32/Gunsan.bat
    W32/FragLite.bat
    W32/Dotor.vbs
    W32/CryptoLab.vbs
    W32/Adult.vbs
    W32/Younga.vbs
    W32/Sandra.vbs
    Logic.bat
    WinWorm.reg
    IRC/Wandol.vbs
    Repeerc.bat
    IRC/Prophecy.vbs
    W32/Hokilo.vbs
    Jethro.vbs
    W32/Hokilo.bat
    W32/Crackly.bat
  Script Worm (1)
    W32/STD.worm.reg
  Self-extracting archive (1)
    ADtrojan.y.sfx
  Shockwave Flash (1)
    SWF/LFM.926
  Source code (6)
    W32/Join.src
    W32/Badtrans.src
    W97M/Fabi.src
    W97M/Heathen.src
    Fabi.src
    W32/Demig.src
  Source code Worm (1)
    W32/Bumdoc.worm.src
  Trojan (1)
    W32/Kernl
  Unpacked (1)
    Toadie.unp
  Win2K (6)
    W2K/Stream
    W2K/Ketam
    W2K/Team.a
    W2K/Team.b
    W2K/Team.d
    W2K/Team.c
  Win31 (16)
    Winvir.961
    miscompiled
    W16/Zorm
    W16/Wintiny
    W16/Winsurf
    W16/Winlamer
    W16/Vecna.823
    W16/TNT.e
    W16/TNT.b
    W16/Tentacle.1966
    W16/TNT.d
    W16/TNT.a
    W16/Redteam.c
    W16/Redteam.b
    W16/Redteam.a
    W16/Drosh
  Win32 (167)
    W32/Anvil.gen
    W32/Cervan
    W32/Bajar.a.intd
    W32/Shoerec
    W95/Matrix
    W95/Zperm.a
    W32/Hunch.a@MM
    W32/Rexli@MM
    W32/Thespy.b
    W32/Thespy.a
    W32/Scorpio
    W32/Anvil.3864dam
    W32/Anvil.3833b
    W32/Anvil.3864
    W32/Anvil.3833a
    W32/Abotus
    W32/Varra
    W32/Shaitan.3392intd
    W32/Shaitan.3482
    W32/Shaitan.3390
    W32/Shaitan.3550
    W32/Undertake.1929a
    W32/Undertake.c
    W32/Undertake.b
    W32/Tuareg.g
    W32/Yasv.1000
    W32/VChain
    W32/Undertake.a
    W32/Teddybear
    W32/Rous.b
    W32/Mix
    W32/Maya.2254
    W32/Velost
    W32/Undertake.1890
    W32/Undertake.1929b
    W32/Undertake.1904b
    W32/Small.1365
    W32/Ruff
    W32/Reda
    W32/Netres
    W32/Riccy.c
    W32/Small.1368
    W32/Rous.c
    W32/Rous.a
    W32/Refer
    W32/Qudos
    W32/Nimda
    W32/Loa
    W32/Insomnia
    W32/Forever
    W32/Dead.hlp
    W32/Dead.1086
    W32/Cargo.c
    W32/Cargo.a
    W32/Boder
    W32/Boder.4109
    W32/Boder.1592
    W32/Blueball
    W32/Autoworm.3072
    W32/Bender
    W32/Alma.37195
    W32/Cargo.b
    W32/Cabdrop
    W32/Boder.1728
    W32/Boder.1588
    W32/Auryn.1157
    W32/Auryn.1155
    W32/Artelad
    W32/Apathy
    W32/Antites
    W32/AntiMP3
    W32/Antic.695
    W32/Anky
    W32/Alma.37274
    W32/Alma.2414
    W32/Akez
    W32/Small.736
    W32/Small.690
    W32/Suqin
    W32/Doser.4539
    W32/Sleepy
    W32/Cargo.e
    W32/Cargo.d
    W32/Evyl.h
    W32/Hortiga
    W32/VGrass
    W32/Butool.a
    W32/Vulcano
    W32/Toal.b
    W32/Orez.5780dr
    W32/Zwqq
    W32/Zikam.4236
    W32/Xcod
    W32/Werther.1224
    W32/Orez.6287dr
    W32/Zikam
    W32/Tuareg.a
    W32/Xoro
    W32/Teddybear.dat
    W32/Spit.8192
    W32/Sinus
    W32/Santana.b
    W32/Tuareg.c
    W32/Tuareg.b
    W32/Stupid
    W32/Society
    W32/Santana.a
    W32/Press.6382
    W32/Press.6386dr
    W32/Peana
    W32/Obsolete
    W32/Npe.hook
    W32/NGVCK.c.6760
    W32/Press.6386
    W32/Press.6380dr
    W32/Press.6382dr
    W32/Positon
    W32/Perly
    W32/NGVCK.6184
    W32/NGVCK.797
    W32/MTV.4608b
    W32/Manymize.js
    W32/Lassa.a
    W32/Press.6380
    W32/Nofatuk
    W32/NGVCK.c.3804
    W32/Mypics.36352dr
    W32/Lassa.b
    W32/MTV.4608a
    W32/Jater
    W32/Hybris.exe
    W32/HLL.Pre
    W32/HLLT.4096
    W32/HLL.sub.30030
    W32/HLL.sub.29128
    W32/HLL.Clay
    W32/Gunsan
    W32/Golsys.b
    W32/Golsys.a
    W32/Godon
    W32/Godol
    W32/Godoh
    W32/Gloria.2963
    W32/Frone
    W32/Fozer
    W32/Finaldo
    W32/Evyl.g
    W32/Evyl
    W32/Evyl.b
    W32/Eex
    W32/Dire
    W32/Dion.b
    W32/Dion.a
    W32/Deimos
    W32/Datus
    W32/Cida
    W32/Cefet
    W32/Butter
    W32/Banaw
    W32/Awfull
    W32/Alma.5632
    W32/Alma.5319
    W32/Alisa
    W32/Aldebar.8281
    W32/Alcaul.d
    W32/Delarm
    W32/Alcarys
  Win9x (123)
    W95/Tecata
    W32/Begemot
    W98/Matyas
    W95/Quza
    W95/Arianne.1022
    W95/Suk.8699
    W95/Roma.b
    W95/Fys.1728
    W95/Uwaga.3237
    W95/Yel.b
    W95/Yel.a
    W95/Working
    W95/Rat.886
    W95/Powerful.1592
    W95/Pofu.1901
    W95/Nico
    W95/Memorial.vxd
    W95/Lucky
    W95/Jacky
    W95/Quza.3361
    W95/Ussu
    W95/Sv.2332
    W95/Rat.505
    W95/Prizzy
    W95/Totilix.3584
    W95/Tip
    W95/Sv.2560
    W95/Sma
    W95/Rat.463
    W95/Pofu.1773
    W95/Olivia.3378
    W95/Mystery.b
    W95/Mystery.a
    W95/Libertine.c
    W95/Klunky.b
    W95/Kenston.1958
    W95/Kenston.1895a
    W95/Kaze
    W95/Jadis.3579
    W95/Dictator
    W95/Dead.4316
    W95/Dead.4172
    W95/Dead.4388
    W95/Kenston.1895b
    W95/Jadis
    W95/Cerebrus
    W95/Bumble.1736
    W95/Arianne.1052
    W95/Chimera
    W95/Bumble.1736a
    W95/Atav.1939
    W95/Andras
    W95/Murkry.441intd
    W95/Atav.2073
    W95/Eak
    W95/Suk.7972dr
    W95/Babylonia.hlp
    W95/Zperm.b
    W95/Murkry.398a
    W95/Zerg.a
    W95/Wg.12288
    W95/Voodoo.a
    W95/Stealthboot
    W95/Zerg.b
    W95/Voodoo.b
    W95/Thorn
    W95/Taek.1275
    W95/Soth.1844
    W95/Sist.952
    W95/Sanat
    W95/Tita.3214
    W95/Tenta
    W95/Soth.1968
    W95/Sadon
    W95/Rikx.8192
    W95/Pyros
    W95/Punch
    W95/Regswap
    W95/Nigro
    W95/Memorial.dos
    W95/Lizard.2381vxd
    W95/Lizard.1967vxd
    W95/Kurgan.vxd
    W95/Putita.184
    W95/Puma
    W95/Opera.1090
    W95/Opera.1022
    W95/Opera.1020
    W95/Murkry.398b
    W95/Murkry.399intd
    W95/Murkry.390
    W95/Lizard.1967
    W95/Lizard.2381
    W95/Kurgan
    W95/Murkry.383
    W95/Memorial
    W95/Lizard.5150vxd
    W95/Lizard.2869vxd
    W95/Lizard.2869
    W95/Ihsix
    W95/Henky.Kaido.c
    W95/Henky.Morgue.b
    W95/Henky.Kaido.b
    W95/Henky.Kaido.a
    W95/Henky.Morgue.d
    W95/Henky.Morgue.c
    W95/Henky.Morgue.a
    W95/Hazlo
    W95/Fono.17152
    W95/Feeling.1195intd
    W95/Feeling.824intd
    W95/Darkside.1487
    W95/Darkside.1384
    W95/Darkside.1375b
    W95/Darkside.1375a
    W95/Darkside.1109
    W95/Coler
    W95/CIH.1003dr
    W95/Atom
    W95/Arianne.1022dr
    W95/dr.Anxiety.G
    W95/dr.Harry.b
    W95/dr.Harry.a
  Worm (66)
    W32/RunDoom.worm
    W95/Firkin.worm
    W32/Mona.worm
    W32/Matcher@MM
    W32/Klez.gen@MM
    W32/Goround.worm
    W32/Leave.worm.j
    W32/Zelda.worm
    W32/Nulock.worm
    W32/Mundil.worm
    W32/Leave.worm.b
    W32/Scareg.worm
    W32/Proy.worm
    W95/Matit.worm
    W32/Leave.worm.c
    W32/Leave.worm.a
    W32/Fisp.worm
    W32/Foxma.worm.b
    W32/Fotos.worm
    W32/Dervise.worm
    W32/Acoola.worm
    Repeerc.worm
    W32/Foxma.worm.a
    W32/Foxma.worm.d
    W32/Lolol.e.worm
    W32/Lolol.a.worm
    W32/Lolol.d.worm
    W32/Lolol.b.worm
    W32/Kelino.a.worm
    W32/Bored.worm
    W32/Youzer.worm
    W32/Vicex.worm
    W32/Tress.worm
    W32/Sunder.worm
    W32/Starfil.worm
    W32/Yytri.worm
    W32/Watcher.worm
    W32/Taripox.worm.a
    W32/SoftSix.worm.a
    W32/Sado.worm.b
    W32/Vig.worm.b
    W32/Taripox.worm.b
    W32/Stars.worm
    W32/SoftSix.worm.b
    W16/Slyde.worm
    W32/Sado.worm.a
    W32/Proget.worm
    W32/Nyt.worm
    W95/Price.worm
    W32/Kelino.d.worm
    W32/Kelino.b.worm
    W32/KMKY.worm
    W32/Kelino.e.worm
    W32/Kelino.c.worm
    W32/IIS.worm
    IRC/Mabra.worm
    W32/Funpo.worm
    W95/Firkin.worm.b
    W95/Firkin.worm.a
    W32/Conedi.worm
    W32/Bumerang.worm
    W32/Boomer.worm
    W32/Lepha.worm.a
    Homer.worm.a
    W32/Lepha.worm.b
    Homer.worm.b