W32/Virut.V Virus

 Virus Information - W32/Virut.V Virus:

W32/Virut.V is a virus. The virus will infect Windows systems and spreads through email.

Upon execution, the virus creates an event named VevT to check that only one instance of the virus runs on the infected system.

The virus attempts to infect files with .exe and .scr extensions found in the infected system.

It avoids infecting files, where file names starts with any of the following strings:

PSTO
WC32
WCUN
WINC

Then virus opens a back door by connecting to proxim.ircgalaxy.pl IRC server on TCP port 80, allowing a remote attacker to download files on to the infected computer and execute them.

It then attempts to access the site http://ntkrnlpa.info and may download variants of itself.