Welcome to the Virus Encyclopedia of Panda Security.
On being run it self-extracts into a temporary folder, creating two files called SIMPSONS.BAT and SIMPSONS.BMP.The former is run immediately after the two files that have been extracted and, is actually an MS-DOS batch file including calls to the deletion programs of the MS-DOS DELTREE.EXE directories. With this it attempts to delete all folders and sub folders in alphabetical order of the C:, A:, B: and D: drives, in this order. Afterwards, it deletes itself to avoid leaving traces of its presence. This is a highly destructive Trojan that has the code to attack the drive from where it is executed along with all drives listed above in the order specified. Due to a design bug, this does not always happen, and the Trojan only manages to delete a part of the files on drive C:.After the Trojan is run, the user sees an MS-DOS window similar to the one shown below:
In the dialog box that appears after clicking on the button About of the self-extractor, the following text in Spanish can be seen:Dedicado a todos los que de una u otra forma pertenecen y amamantan a la maldita burocracia. El maldito capitalismo será nuestro final...
ARE YOU FACING ANY PC OR INTERNET RELATED PROBLEMS? FREE SUPPORT INCLUDED. CALL US 24/7
powered by Anytech365