Kiwi
Premium
join:2003-05-26
USA
 ·Comcast
 ·Aristotle Internet
| Apparently is not a false positive...
"The malware determines the location of the current Windows folder by querying the operating system. The default installation location for the Windows directory for Windows 2000 and NT is C:\Winnt; for 95,98 and ME is C:\Windows; and for XP is C:\Windows.
%Temp% is a variable location and refers to the directory designated for temporary files. The malware determines the location of the current Temp folder by querying the operating system. A typical path is "C:\Documents and Settings\\Local Settings\Temp", or "C:\WINDOWS\TEMP".
If the current day is the 9th, it adds the following text to the infected file:
"This file is infected by Html.Lame!"
"What a virus!  "
Cheers |
