Malware Alert - Win32.Worm.Zimuse.A - The Hard-Disk Wrecker

[MJL600000]

Win32:Renosa-I [Wrm] is the worst.Still have it

[HYperman68]

this thing can't do shit to win vista x64 =D

[clubpenguincpcold]

plz make more vids like this

[Black110Volume1]

Haha your pc is crashed :D

[Robotshowdown747]

So everyone knows the link dosen't work anymore it just takes you to a 404 page with a pufferfish on it.

[Italianu34]

How to repair:

1.after your system is "down" check online how to repair the MBR.

2.Repair the MBR

3.Remove the virus completely(registry,files,star­t-up,services,processes etc.)

4.restart computer,if it does the same try again

this only works for Windows

[Gadget431TECH]

i have that virus on my xp as well

[Robotshowdown747]

What's the music. Its badass!

[DonMino95]

I have this worm, its original file, but because when I launch it crashes in VirtualBox?But if you restart the VirtualBox after 40 days you see the message and then you know 

[DonMino95]

name of song please

[Geno11116]

how did you upload this if the system is dead? HMM???

[Mi3kka1S4]

@Geno11116 virtual machine

[fataltorch3956]

@Geno11116 maybe hq camera then to another comp on his account

[blackblob500]

@fataltorch3956 vm dude

[1EnterNameHere1]

hmmm so does this like delete ur windows folder or does it not let it restart... because if it didnt delte any files and its just preventing it to start up, i think u can use a bootable disk

[GamesNews1]

@edenboy3 lol

[SigilArcanum]

i am pretty sure if this is zipped and converted to a self extracting exe (with a .exe to give a false pretense) Most antivirus software won't recognise the source code. simalar to the hiding the patch with Netbus ver 1.7 i believe.

[GamesNews1]

@SigilArcanum yep man

nice thinking :)

[Italianu34]

Hahaha i got infected by one and it deletes the Windows folder after the restart[and i think it was a little one not a full destroyer]...and it deletes any OS based on NT because i got this error after infect: NTLDR not found.... PRESS CTRL+ALT+DEL To restart....and NTLDR comes from NT loader....so be aware it ussually comes with a program on the net ... i mean like "Y Mess see invisible people"...so be aware because it can't be so easily detected

[SigilArcanum]

it is what the educated call a worm and rootkit with a logic bomb. logic bomb being any malicious action being enacted at a later date, say april fools

[babywolf1]

why don't you use linux

[PhasmidFan1994]

I dont trust this link!!!

Other question: whats the name of the website where you get this virus??? I know its an iq test

[fataltorch3956]

@PhasmidFan1994 u dont trust link but u want the virus wth?

[BorisVasilev22]

I have also heard it in CyberLink's PowerDVD video.

[BorisVasilev22]

Does someone knows the name of the music that is being used?

[starcraftyt]

@BorisVasilev22 yea good music

[rogueamp]

I have a copy of Zimuse.B

[pranaygtr]

How many on VT detect it?

[LuisTheComrade]

Looking for samples(s) of Zimuse, any variant.

[boblester122]

this guy is rich!

[daand12]

I dont go click on your link i dont trust that

[RotInPain]

music by ?

cool video by the way ;)

[srikanth94]

awesome make some more vids like this

[ebildude123]

Hey BitDefender, can you give me a sample to test the worm on a VM and experience what it does? Thanks.

[tyanny]

Does anybody out there know how to tell if a machine is infected with this??

[TheDexboy]

Good thing that it can't mess with x64 Win7... :D

Cool music by the way!

[amzaff]

just glad i'm using linux.. :D

[cankarales]

so it can't harm your computer if trying this out in vmware? well i'm not gonna try it.. i'm just asking :D

[Jtaylor1]

A 32-bit OS is more vulnerable to this worm than 64-bit.

[Paulo412349]

Yep because the 64 bit versions of both Windows Vista and 7 require digitally signed drivers. But there's a major drawback on using those versions, there are a lot of drivers that simply won't work on the 64 bit version of Windows Vista and 7.

[tyanny]

yes of course thank you for the alert, but doesn't any know how to tell if a machine is infected?

[briozaver]

nice work

[PhilMusiq]

Wow Very nice work thank you for this alert !!!

[1888junkteam]

excellent work!

[Puda]

Jesus... ! This one is good... Been a long time a virus didn't attack a PC that much ! Beware...

[tyanny]

ok, so how do we find out if we're infected?

[sphynxsoft]

No, it affects all the operating systems based on NT, including Vista (but not Windows 7, although I haven't tested the sample on Windows 7). Please make sure to check this space soon to see a comparative pen-test on other operating systems.

[octahedron80]

Does it affect only Windows XP?

[njzhbbr]

No it does affect more versions but there is a slight difference between if you have 32 bit or 64 bit version xp, vista, windows 7

[aljay0007]

@octahedron80

no it infect all Systems only 64x bit Vista,7 cant get Virus in becus they are Digitaly Writen