AwaN. For most programmers, Visual Basic Classic (version 6.0 or below) is still a favorite, including a local maker for viruses. One of the viruses created with Visual Basic is the cloud type worms, with size around 36 KB, without in-pack.Icon used this virus is quite unique, namely the eye icon image. As can be seen as shown below:
Awan Icon
The virus will create AwaN.exe file on the Windows folder, and create a file containing the text Read Dong.txt:
============================================
# File Ini dibuat oleh Program
# Tanggal : 4/16/2010
# Jam : 12:40:27 PM
# Komputer anda sudah tertular virus saya
# tenang aja kok virus nya gak bahaya
# Cuma ngigit dikit, he… he … he…
============================================
The dates and hours listed were taken from an infected computer system. He also infects flash disks and create file AwaN.exe. Election eye icon by virus makers is not without significance, most likely due to this virus has the ability to peer programs are run and stored in a file named AwaN.dll. Sample contents are as follows:
4:20:44 PM 4/16/2010
Size: .0 MB
*** PROGRAMS OPENED ***
4:20:26 PM Process Monitor – Sysinternals: www.sysinternals.com PROCMON_WINDOW_CLASS
4:20:29 PM Shell_TrayWnd
4:20:30 PM Start Menu DV2ControlHost
4:20:31 PM Run #32770
4:20:33 PM Untitled – Notepad Notepad
4:20:36 PM Save As #32770
———————————————-
To eradicate this virus or another virus variant, Build2 PCMAV Update 3.0.1 is now available with the addition of 10 new virus variant identification. For those users PCMAV 3.0.1, it is strongly recommended to update immediately, so that you PCMAV can recognize and eradicate the virus even more.
List of virus addition to 3.0.1 Update PCMAV Build2:
Abzenz.B
Autoit.EW
Autoit.EW.ini
AwaN
Bohia
Bohia.dll
Bohia.url.A
Bohia.url.B
Bohia.url.C
Bohia.url.D
Bohia.url.E
Bohia.url.F
Dots.vbs
Forever
Forever.dll
Forever.hosts
Forever.inf
GadiHot.E
GadiHot.E.txt
Malingsi.O
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.dll
Malingsi.O.exe
Malingsi.O.ini
Malingsi.O.mrc
Pengantin_Baru
Saphira.B
Saphira.B.sys
Sarap
Xcrack
Xcrack.inf
Download PCMAV 3.0.1 Update Build2 (AwaN)
