Symantec United States
global sites
products and services
purchase
support
security response
downloads
about symantec
search
feedback


© 1995-2007 Symantec Corporation.
All rights reserved.
Legal Notices
Privacy Policy

masthead
 

*** VIRUS ALERT *** VIRUS ALERT *** VIRUS ALERT ***

Unique Computer Virus Can Be Continually Updated By Virus Writer From Central Location

Symantec Detects W95.Babylonia Computer Virus that Disguises Itself as
a Y2K Fix

W95.Babylonia Y2K Virus Description:

  • A new Y2K virus has been discovered that disguises itself as a Y2K fix - the virus was discovered on December 6, 1999.
  • The virus is unique - it has the ability to download the viral components of the virus from the Internet. When the virus is executed, the virus will wait for an Internet connection. When it detects that the computer can access the Internet, it will download several files from a web server in Japan. Because the virus has such capability, it is possible for the virus writer to update the virus centrally.
  • W95.Babylonia is a very complex virus that propagates mainly to other computer users via MIRC. MIRC is a text based communication application used to chat over the Internet. When an infected user logs onto MIRC, it will automatically send the virus to everyone within the same MIRC chat room as the infected user. The virus will be sent as a Y2K bug fix. Once this file (Y2K bug fix) is executed, it will infects other 32-bit EXE program files and also Windows Help files.
  • SARC currently has approximately 20 submissions of the virus from customers and believes the virus to be spreading quickly worldwide.
  • The virus was written by the 29A virus writing group.

Characteristics of Infection:
The virus will try to modify an infected system to display the following message when the computer is booted:

  W95/Babylonia by Vecna (c) 1999
  Greetz to RoadKil and VirusBuster
  Big thankz to sok4ever webmaster
  Abracos pra galera brazuca!!!
  ---
  Eu boto fogo na Babilonia!

The virus will also send an email to 'babylonia_counter@hotmail.com' to track infected computers.

Virus Rating:
Medium/High Risk

Symantec Antivirus Research Center (SARC):
SARC is one of the industry's largest dedicated team of virus experts. With offices located in the United States, Japan, Australia, and the Netherlands, the sun never sets on SARC. The center's mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats, and educate the public on safe computing practices. As new computer viruses appear, SARC develops identification and detection for these viruses, and provides either a repair or delete operation, thus keeping users protected against the latest virus threats.

About Symantec
Symantec, a world leader in Internet security technology, provides content security solutions to enterprise organizations and helps companies manage and support workforces that use computers and other mobile devices.

NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, view the Symantec Press Center at www.symantec.com/PressCenter/ on Symantec's Website.

Brands and products referenced herein are the trademarks or registered trademarks of their respective holders. All prices noted are in US dollars and are valid only in the United States.