Welcome to the Virus Encyclopedia of Panda Security.
The main aim of this worm is to spread and affect as many computers as possible through peer-to-peer (P2P) file sharing programs and via IRC. It displays a message box with the text YOU ARE INFECTED BY RAVO_5002 when it is run.
|First detected on:||Dec. 1, 2007|
|Detection updated on:||Dec. 4, 2007|
|Yes, using TruPrevent Technologies
Vora.A is a worm whose main aim is to spread and affect as many computers as possible.
In order to do so, it uses the following means of infection:
- P2P nets, making copies of itself in the shared directories of several P2P programs, such as eMule or KaZaA.
- IRC channels, sending a copy of itself to all the users that are connected to the same channel as the affected user.
Vora.A is easy to recognize, as when it is run, a message box is displayed with the text YOU ARE INFECTED BY RAVO_5002:>