Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It infects PE and Word files, displays messages on screen and deletes antivirus programs.|
|Detection updated on:||Nov. 29, 1995|
|Country of origin:||SWEDEN|
Cocaine is a polymorphic virus that infects PE files in computers with the Windows 98/ 95 operating systems installed. It can also infect NT computers, although the infection does not last long, as certain files are corrupted that it needs to carry on with its infection.
Cocaine also acts as a macro virus. This means that it infects Word’s global template and from there, it infects all the Word documents used on the affected computer.
This virus uses several means of transmission. It includes an infected document in the e-mail messages sent out by the user of the affected computer and it also looks for e-mail addresses in the Web pages visited by the user in order to send them an e-mail message containing the virus code.
It also infects Word and PE files. If these documents are used on other computers, these computers will also be infected.
The effects of Cocaine include displaying messages on screen and deleting antivirus programs.
Cocaine is easy to identify when it spreads via e-mail, as it always reaches computers in a message with one of the following subjects:
- Kewl page!
- Improvement to your page
- Your page r0x0r!
- You must see this...
- Secret stuff!
Cocaine displays a message on screen four months after carrying out its infection. This message is a dialog box with the following characteristics:
Message: One of the following:
- Your life burn faster, obey your master...
- Chop your breakfast on a mirror...
- Veins that pump with fear, sucking darkest clear...
- Taste me you will see, more is all you need...
- I will occupy, I will help you die...
- I will run through you, now I rule you too...
- Master of Puppets, I'm pulling your strings...