Caterpillar computer virus

Users with basic knowledge on how to use the PC's recovery mode can easily return their computer to normal in a few minutes at most. It is currently unknown if MEMZ or other variants of this trojan has entered the wild; Microsoft's own help desk has several questions related to MEMZ from confused or inexperienced users who ran the trojan without reading the warnings first, but as of there is no evidence that the trojan has been propagated through any traditional method.

To prevent malicious users from deliberately spreading the trojan, currently, only versions 4 which has the disclaimer and non-destructive version bundled with the destructive version and up are available to download. At the same time, it will leave a note titled note. The MBR payload written while note. If the installed system uses an EFI bootloader, "Nyan Cat" does not appear on startup due to different booting schemes, but the computer will still fail to boot as the EFI system partition will be impossible to find due to the partition table being broken.

The first payload inside of Windows is opening random websites, as well as Google searches at Google. After a while, the trojan starts randomly moving the mouse slightly, and messages taunting the user appear see image , getting more violent and rapid as time progresses. A bit later, warning icons get drawn at random coordinates and error icons get drawn below the cursor by PayloadDrawErrors, the trojan plays error sounds through the PayloadSound payload, and the PayloadTunnel payload copies your screen's contents and place them on top of your screen, getting smaller and smaller each time known as the "Tunnel" effect.

It gets faster as time passes on. Trying to end the MEMZ process will, as mentioned above, start killWindows , which pops up tons of message boxes containing "leetspeek" messages, and then crash the computer to a BSOD using NtRaiseHardError, an undocumented ntdll call, with error code 0xC Instead of booting into the operating system, the computer will display the message using a typewriter effect:.

This is followed by an animation of the Nyan Cat being played with the PC speakers producing the well-known soundtrack for the animation. The last payload may not always work, and the computer may boot normally. If the installed system uses an EFI bootloader, the computer still boots without Nyan Cat due to the different boot process.

However, the partition table is still destroyed and the EFI system partition cannot be found. MEMZ 4.

Leurak, the creator of the MEMZ trojan, recommends that the clean version of MEMZ is first tested on a virtual machine before it is used on a real one. If you are interested in creating a computer virus , trojan , worm , malware , or another malicious program as revenge, payback, or as a prank, we suggest you rethink. Creating a virus that deletes files or causes other issues resolves nothing and results in prosecution by the law.

In other words, you could be fined or sent to prison. Instead of creating computer viruses or other malware, consider learning a computer programming language. You will learn a lot more by learning one or more programming languages and become more qualified in getting hired at a company that designs programs or analyzes viruses.

No one ever got hired because they wrote a computer virus. You will learn a lot more about how computer programs and viruses work by learning to program than you ever will by writing and tinkering with computer viruses.

A computer virus is a program solely designed to do malicious tasks, such as deleting files or inserting code into other files to corrupt them. It accomplishes these tasks by copying itself to other areas in memory or by spreading to other computers and areas the logged in user can access.

By learning to program, you'll understand how viruses work in addition to gaining other skills. See the link below if you are not exactly sure what language to start learning first. Platform :. Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it. A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs.

A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:. First check if your F-Secure security program is using the latest detection database updates , then try scanning the file again. After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.

NOTE If the file was moved to quarantine , you need to collect the file from quarantine before you can submit it. If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product. Note You need administrative rights to change the settings.