KittyKat.A
Threat LevelDamageDistribution

Effects 

KittyKat.A has no destructive effects. Its main aim is to spread to other computers inserting its code in files with an RAR extension.

Additionally, it displays a message with the following text when it infects RAR files:

Eppur si muove! - Defend your opinion!

Infection strategy 

KittyKat.A follows the routine bellow:

• It reaches the computer in a RAR file consisting of the original files, a number of files with pseudorandom names and a file called START.BAT.
• If the file START.BAT is run, a new executable file called NRK.EXE is created. This file searches for RAR extension files in the affected computer, and inserts its code in these files.
• Once the process finishes, it displays a message with the following text:
  Eppur si muove! - Defend your opinion!

Means of transmission 

KittyKat.A does not spread using its own means, but it infects other files by inserting its code in the files with an RAR extension that it finds in the affected computer.

It reaches computers when these infected files are distributed, which can enter computers through any of the typical means of tranmission, which include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.

Further Details  

KittyKat.A is written in the Assembler language. This virus is 9,216 bytes in size.