Filename: activat0r.exe


INFO so far:
causes an error in files used to display windows and task bar in winxp
ending process will kill virus until next reboot
possibly infects multiple os's including amiga and some cell phones
looks like it opens shares on victim machine
definately connects to ircserver on 0ptical.net on port 6667
the infected system's MIRC nick indicates os type
as of 3:20am 9/12/03 CST there was one active HUMAN user in irc server (besides us)

Discovered by: Ryan_Rester@yahoo.com on 9/12/03

more to come... i'm getting my "expert" in assembly over here soon and i'm still monitoring the server and sent packets

SHOUT OUTZ:
Chanperv, prophet, thisid, vampgurl12000, low_budget_customs, demonslayer, queenofbreefolk