Autoit-ReplaceIcon. This unique Worm Autoit script-based and has the ability polymorphic. File size can vary, so too autorun.inf file that was created. Even the language information when the right click - Properties - Version - Language, also may vary in each of the worm file is created. Filename worm that spreads through the disk media also appeared random, although always with extension *. exe and consists of 6 characters. For example:brgzdt.exe
civfap.exe
hissyn.exe
naigpy.exe
uxjxhp.exe
Uniquely, the icons used are also varied, some examples of the worm files with different icons that look like the picture above. Name Autoit-ReplaceIcon taken from one of the object function (ImageList_ReplaceIcon) that read the body of the worm. Files that are active in memory named csrcs.exe (located at the locations WINDOWS \ System32), at first glance looks like a Windows system file csrss.exe property.
List of virus addition to 3.0.3 Update PCMAV Build2:
74BE16
74BE16.exe.A
74BE16.exe.B
74BE16.fne.A
74BE16.fne.B
74BE16.fne.C
74BE16.fne.D
74BE16.fne.E
74BE16.fne.F
74BE16.fne.G
74BE16.fnr.A
74BE16.fnr.B
Aibo.C
Anti
Anti.doc
Autoit.EY
Autoit.EZ
Autoit.EZ.cmd
Autoit.EZ.inf
Autoit.FA
Autoit-ReplaceIcon
CekVirus
DosenBlagu
Hasmi.B
Hasmi.B.ini
Hswdc.B
Iklan
KillMe
Malingsi.R
Malingsi.S
Malingsi.S.ini
Malingsi.T
Malingsi.T.ini
Malingsi.T.mrc
Malingsi.T.sys.A
Malingsi.T.sys.B
Malingsi.T.sys.C
Malingsi.T.sys.D
Malingsi.T.sys.E
Malingsi.T.sys.F
Malingsi.T.sys.G
Malingsi.T.sys.H
Metamorpica
Minerva.D
MyDoom.B
Restui
Download PCMAV 3.0.3 Update Build2 (Autoit-ReplaceIcon: Worm Dengan Icon yang Beragam)
