You're in: Panda Security > Home Users > security-info > about-malware > encyclopedia > overview
Active Scan. Scan your PC free
Panda Security Product Line 2012

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Shark

 
Threat LevelLow threatDamageHighDistributionNot widespread

Effects 

Shark is a virus constructor type malware. To be more precise, Shark allows to create Trojans which, among other actions, steal all type of information, such as passwords. It is not necessary to have any programming skills to use this malicious tool.

Shark allows to configure the following settings for the Trojans to be created, among others:

  • Install ActiveX controls.
  • Copy files in the installation directory of the affected computer.
  • Configure specific actions for processes and services, such as ending them.
  • Run the Trojan whenever Windows is started.
  • Display error or warning messages when the Trojan is run.
  • Configure the attributes of the created file and the type of server.
  • Compress the file with UPX.

Additionally, it allows the Trojans to obtain the following information:

  • Passwords belonging to email accounts, MSN Messenger, Firefox, the Windows key and the platform of games called Steam, among others.
  • Name and version of the installed programs.
  • Opened connections and programs that are using them.
  • Information about the active processes and services.

On the other hand, it allows the following utilities to be run in the affected computer:

  • Windows Registry Editor.
  • Download and run files.
  • Capture screenshots and images from the webcam, if there was any.
  • Log the keystrokes typed by the user.
  • Record audio.
  • Edit the host.
  • Analize the network traffic.
  • Chat server.

 

Once a Trojan created by Shark is run in a computer, it is automatically connected to the application, where the following screen is displayed:


In this screen, several data from the affected computer are displayed, such as operating system, processor, RAM memory, geographical area, IP address, etc.

Means of transmission 

Trojans created using Shark do not spread automatically using their own means. They need an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, e-mail messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.

Further Details  

Shark is written in the programming language Visual Basic v6 and is 3,854,336 bytes in size.

The following images belong to the icon and an interface of the program respectively: