"The game is over"

Filed Under: Malware, SophosLabs

Today I ran into something I haven't seen in a while - a worm that announces its presence. 

W32/Atax-A is a typical run-of-the-mill worm. It performs some of the usual spreading techniques, like copying itself to removable shared drives and subsequently creating an Autorun.inf file that is designed to run the copy of the worm when the infected shared drive is transferred to an uninfected computer.

The worm in addition, calls on the Windows Print Utility to print an ASCII file it carries. The rough translation of the printout reads "The game is over. You have been defeated by VenoM."

 venom1.jpg

Thank you for that little bit of nostalgia. :)

You might like

About the author

Beth Jones Senior Threat Researcher, SophosLabs US Beth manages the day-to-day research and analysis activities of incoming suspicious malware threats that arrive in SophosLabs via customers, partners and prospects. Beth has worked in Sophos's Boston lab for more than five years and brings nearly a decade of network security experience to Sophos.