Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It ends proceses belonging to antivirus programs, firewalls and system monitoring tools. It disables the Windows Registry editing tools|
|First detected on:||Aug. 27, 2003|
|Detection updated on:||Oct. 13, 2004|
|Yes, using TruPrevent Technologies
Darby.A is a virus that shares characteristics with worms and spreads via e-mail, through peer-to-peer file sharing (P2P) programs and via IRC.
Darby.A ends processes belonging to several antivirus programs and other applications, such as firewalls and system monitoring tools. This leaves the affected computer vulnerable to the attacks of other viruses and worms.
Darby.A infects Word’s global template (NORMAL.DOT file) and Excel’s template (TEMPLATE.XLS file). All the Word documents and Excel spreadsheets based on these templates will then be infected. In addition, Darby.A disables the macro editing tools incorporated in these programs.
Darby.A is easy to recognize once it has infected the computer, as it displays the following messages on screen:
In computers with a Spanish version of any Windows operating system, it displays the following message on screen when the system date reaches the first day of every month:
- When the user pushes the OK button, it displays the following fake error message:
If the Windows operating system is in any other language but Spanish, the text will be displayed in English.