• Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!

magistr virus

Overclockers is supported by our readers. When you click a link to make a purchase, we may earn a commission. Learn More.

nerd4life

Member
Joined
Apr 18, 2001
Location
Houston, Texas
i've been doing work for my sister's job for about 3 years i guess now. her boss is constantly downloading viruses at work and on his home computer and just last week the virus below hit him. looks likes he's screwed, when i booted it up no partitions even existed so i'm sure it's too late. it's not too bad at work anymore since they are on T1 now and norton is set to automatically download updates.

anyways, anyone seen this one or been hit with it ??


***************************************************
3) Magistr Virus

Aliases: IWorm_Magistr, I-Worm.Magistr, W32/[email protected]

Magistr is a very dangerous memory resident Win32 worm that is
spread by email, infects and is able to spread itself over a local
network (LAN).


The virus has an extremely high damage potential. Depending on
different conditions, it erases hard drive data, CMOS memory and
Flash Bios contents in the same way the CIH (aka Chernobyl) virus does.

To send infected emails the virus reads the settings of the Email
client settings from system registry. These include:

Outlook Express

Netscape Messenger

Internet Mail and News


The virus then scans email database files of the found e-mail
programs and sends its copies to all addresses.

The infected messages may have no body text or no subject line,
or random text. The attached file name is varies too, it will have a
.EXE or .SCR extension.

One month after infecting the computer the virus overwrites all disk files with text "YOUARESH**" on all local and network drives.
Under Win9x the virus also erases CMOS, Flash Bios and hard
drive data. The virus then displays the message:

Another haughty bloodsucker.......

YOU THINK YOU ARE GOD ,

BUT YOU ARE ONLY A CHUNK OF SH**
***********************************************
 

Disputant

Member
Joined
Aug 6, 2002
Location
Chicago, IL
Yeah, thats a good one, haven't seen it in over a year though. Doesn't it also erase the CMOS and flash the bios as well? Seems like I remember that one a while back. Better him than me. :D
 
OP
nerd4life

nerd4life

Member
Joined
Apr 18, 2001
Location
Houston, Texas
said on norton that it flashes the bios under win 9x and me, but nt based users are ok. they just lose all their data. it is a nice virus though, and the fact that it was in a virus definition from over a year ago just makes me laugh. more money for me. =)