| Port No | 1020 |
| Service Name | Vampire |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | Vampire is an open source ICQ worm programmed in Visual Basic. Vampire spreads by sending itself to other ICQ users with files such as "This Rox.zip .exe". When sent, ICQ only displays This Rox.zip to the person receiving the file. Vampire tries to send itself out every 1-20 minutes (it chooses randomly). When Vampire tries to send itself to another ICQ user it hides the file transfer window. Being open source means anything in it can be changed easily. However, because it is programmed in Visual Basic the chances of wide spread infection are reduced greatly. |
| Reference Link | More Information |
| Attack | Name:Vampire How To Remove: 1. Remove the SYSMSG key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices Which can be done with regedit or any other registry editing program. 3. Reboot the computer or close SYSMSG332. 3. Delete the trojan file SYSMSG332 in the windows system directory. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.