Welcome to the Virus Encyclopedia of Panda Security.
It is a direct action virus that infects scripts belonging to the application IDA (Interactive Disassembler). It reaches other computers when the infected files are distributed.>
|First detected on:||July 6, 2006|
|Detection updated on:||July 6, 2006|
|Yes, using TruPrevent Technologies
Gatt.A is a direct action virus that searches the computer for scripts belonging to the application IDA (Interactive Disassembler) in order to infect them. These scripts have an IDC extension.
Its infection method is polymorphic. When Gatt.A infects an IDC script, it opens itself and generates an IDC code in run time, which is designed to create the executable file belonging to Gatt.A. The IDC script it creates is detected as IDA/Gatt.A.
This infection method makes Gatt.A work properly only on Windows computers, whereas IDA is supported by other platforms such as Linux.
Gatt.A does not spread automatically by its own means, but it infect files. It reaches other computers when the infected files are distributed.
Gatt.A is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.