About: Simile (computer virus)

Facets (new session)
Description
Metadata
Settings
- Rule:
- Inverse Functional Properties:
- "Same As":

About: Simile (computer virus) Goto Sponge NotDistinct Permalink

An Entity of Type : yago:Virus106585816, within Data Space : dbpedia.demo.openlinksw.com associated with source document(s)
QRcode icon

http://dbpedia.demo.openlinksw.com/describe/?url=http%3A%2F%2Fdbpedia.org%2Fresource%2FSimile_%28computer_virus%29&invfp=IFP_OFF&sas=SAME_AS_OFF

Win32/Simile (also known as Etap and MetaPHOR) is a metamorphic computer virus written in assembly language for Microsoft Windows. The virus was released in its most recent version in early March 2002. It was written by the virus writer "Mental Driller". Some of his previous viruses, such as Win95/Drill (which used the TUAREG polymorphic engine), have proved very challenging to detect.

Attributes	Values
rdf:type	species yago:Abstraction100002137 yago:Code106355894 yago:CodingSystem106353757 yago:Communication100033020 yago:MalevolentProgram106573020 yago:Program106568978 yago:Writing106359877 yago:WrittenCommunication106349220 yago:Software106566077 yago:Virus106585816
rdfs:label	Simile (computer virus) (en)
rdfs:comment	Win32/Simile (also known as Etap and MetaPHOR) is a metamorphic computer virus written in assembly language for Microsoft Windows. The virus was released in its most recent version in early March 2002. It was written by the virus writer "Mental Driller". Some of his previous viruses, such as Win95/Drill (which used the TUAREG polymorphic engine), have proved very challenging to detect. (en)
dcterms:subject	Windows file viruses Assembly language software Anti-Zionism Hacking in the 2000s
Wikipage page ID	1517574 (xsd:integer)
Wikipage revision ID	1086922287 (xsd:integer)
Link from a Wikipage to another Wikipage	Metamorphic code Windows file viruses Timeline of computer viruses and worms State of Palestine Strange loop Computer virus Assembly language software Anti-Zionism Hacking in the 2000s Polymorphic engine Assembly language Yom Ha'atzmaut Microsoft Windows Self-modifying code Polymorphic code Hebrew (language) Anti-virus program ZMist (computer virus) Subfolder
Link from a Wikipage to an external page	http://securityresponse.symantec.com/avcenter/venc/data/w32.simile.html https://web.archive.org/web/20080821081632/http:/securityresponse.symantec.com/avcenter/venc/data/w32.simile.html https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx%3FName=Virus%3AWin32%2FSimile.gen&ThreatID=-2147394793
sameAs	Simile (computer virus) Simile (computer virus) Simile (computer virus) Simile (computer virus)
dbp:wikiPageUsesTemplate	dbt:Infobox_computer_virus dbt:Reflist dbt:Start_date_and_age dbt:Hacking_in_the_2000s dbt:Malware-stub
aliases	Etap, MetaPHOR (en)
fullname	Win32/Simile (en)
type	Computer virus
has abstract	Win32/Simile (also known as Etap and MetaPHOR) is a metamorphic computer virus written in assembly language for Microsoft Windows. The virus was released in its most recent version in early March 2002. It was written by the virus writer "Mental Driller". Some of his previous viruses, such as Win95/Drill (which used the TUAREG polymorphic engine), have proved very challenging to detect. When the virus is first executed, it checks the current date. If the host file (the file that is infected with the virus) imports the file User32.dll, then on the 17th of March, June, September, or December, a message is displayed. Depending on the version of the virus, the case of each letter in the text is altered randomly. On 14 May (the anniversary of Israeli independence day), a message saying "Free Palestine!" will be displayed if the system locale is set to Hebrew. The virus then rebuilds itself. This metamorphic process is very complex and accounts for around 90% of the virus' code. After the rebuild, the virus searches for executable files in folders on all fixed and remote drives. Files will not be infected if they are located in a subfolder more than three levels deep, or if the folder name begins with the letter W. For each file that is found, there is a 50 percent chance that it will be ignored. Files will not be infected if they begin with F, PA, SC, DR, NO, or if the letter V appears anywhere in the file name. Due to the way in which the name matching is done, file names that contain certain other characters are also not infected, although this part is not deliberate. The virus contains checks to avoid infecting "goat" or "bait" files (files that are created by anti-virus programs). The infection process uses the structure of the host, as well as random factors, to control the placement of the virus body and the decryptor. (en)
OSes	Microsoft Windows
gold:hypernym	Virus
prov:wasDerivedFrom	wikipedia-en:Simile_(computer_virus)?oldid=1086922287&ns=0
page length (characters) of wiki page	3554 (xsd:nonNegativeInteger)
foaf:isPrimaryTopicOf	wikipedia-en:Simile_(computer_virus)
is Link from a Wikipage to another Wikipage of	Metamorphic code Timeline of computer viruses and worms Comparison of computer viruses Linux malware Cybersecurity information technology list Simile (disambiguation) Zmist Mental Driller Smile (malware) W32/Simile Win32/Simile
is Wikipage redirect of	Mental Driller Smile (malware) W32/Simile Win32/Simile
is Wikipage disambiguates of	Simile (disambiguation)
is foaf:primaryTopic of	wikipedia-en:Simile_(computer_virus)

Faceted Search & Find service v1.17_git139 as of Feb 29 2024

Alternative Linked Data Documents: ODE Content Formats:

RDF

ODATA

Microdata

About

OpenLink Virtuoso version 08.03.3330 as of Mar 19 2024, on Linux (x86_64-generic-linux-glibc212), Single-Server Edition (378 GB total memory, 59 GB memory in use)
Data on this page belongs to its respective rights holders.
Virtuoso Faceted Browser Copyright © 2009-2024 OpenLink Software