Free Web Hosting Provider - Web Hosting - E-commerce - High Speed Internet - Free Web Page
Search the Web

Database : W32.Savior
W32.Savior
Virus Name: W32.Savior
Aliases: None known
Type: Windows 95 executable infecting virus
Resident: No
Stealth: No
Trigger: 7th January
Payload: When triggered the virus displays a message box containing the text "HUM4N G0D THA7 WAS MAN-M4DE WH3RE 1S Y0UR SAViOR N0W". It then replaces the contents of files in the current, Windows and System directories with the first 666 bytes of its own code.
Comments:

Screen savers (extension .SCR) and .EXE files are specifically targeted. Infected files are marked with 666 in hex at a specific offset from the PE header.

Copyright © 2001, All Rights Reserved.
Created & Maintained by VQUEST.