Extract
Security Supplement.
Win2K/Stream: a new virus that runs on Windows 2000
Panda Software has detected a new virus Win2K/Stream, the first of its kind to use the "file stream" feature of Windows 2000 to infect PCs. This feature allows for the division of a file into several sub-files or "streams". Upon infection the virus creates a new stream associated with the victim file which will then read filename:str. This means that the new sub-file or stream can then only be accessed using the new name created by the virus, and as the original file remains hidden and its icon changed, the user cannot access it. On the other hand, to be executed correctly, the virus needs to be executed from an NTFS partition; if executed from a non-NTFS partition, the damage is worse. In this case, the virus cannot create a new stream on which it will try to copy the original file and will overwrite its code...See the full content of this document
Sponsored links
