Helper, Comment administrators, rollback
577
edits
Blackcom: Difference between revisions
no edit summary
No edit summary |
Nemesis6051 (talk | contribs) No edit summary |
||
| Line 6: | Line 6: | ||
|date = 2009 | |date = 2009 | ||
}} | }} | ||
'''Blackcom''' is a [[screamer]] trojan created by | '''Blackcom''' is a [[screamer]] trojan created by FlashUpload. It was written in Visual Basic Script. | ||
When | When launched, it displays a false MSWORD.exe error message that reads: | ||
Microsoft Word cannnot open this document because it contains characters MSWORD.EXE does not understant | |||
After a couple seconds, it displays binary false error message that reads:<pre> | |||
Microsoft Word Cannot Complete The Operation Requested Due To Security Risks | |||
Blackcom then displays more bogus fake error messages | Please include the following in your error report | ||
< | |||
01011011 01101111 01110101 00100000 01000111 00100000 01110100 00100000 01100101 00100000 00100000 00100000 | |||
01011011 01101111 01110101 00100000 01000111 00100000 01110100 00100000 01100101 00100000 00100000 00100000 | |||
</pre> | |||
This message is then followed by [[wikipedia:Microsoft_text-to-speech_voices#Windows_2000_and_Windows_XP|Microsoft Sam]] saying: "CAUTION! A virus has been detected." | |||
Blackcom then displays more bogus fake error messages about svchost.exe and DRVSTORE, then displays a message stating: | |||
An important system file is not found and WINDOWs can no longer run. | |||
After several seconds pass, the trojan initiates a system shutdown and corrupts <code>hal.dll</code> in the System32 directory, rendering Windows unbootable. Furthermore. Blackcom will change the homepage to a [[YouTube]] [[screamer]], but it is unclear what the [[screamer]] was. | |||
==Showcases== | |||
<u>NOTE</u>: Although this trojan contains a [[screamer]], it is not visible in these showcases. | |||
<div style="text-align: center;"> | |||
<youtube width="320" height="180">zh8ceqtyGVI</youtube> | |||
<youtube width="320" height="180">zIXIJCopsDo</youtube> | |||
</div> | |||
{{Maliciousnav}} | {{Maliciousnav}} | ||
{{Comments}} | {{Comments}} | ||
