August 21, 2009 at 18:12Virus for Delphi
Today we released the news about the spread of the Win32 / Induc.A virus for the Delphi development environment. Not so long ago, the virus was actively discussed on Habrahabr .
Win32 / Induc.A is completely harmless, but it is of interest with its distribution mechanism. First, the Delphi environment becomes infected, as a result of which programs compiled on the infected computer also become carriers of the virus code. ESET ThreatSense.Net early warning system detected more than 30,000 unique samples of Win32 / Induc.A malware during the first 24 hours after the virus was added to the signature database on August 18, 2009.
Another interesting feature of the virus was that it also spreads with the Win32 / Spy.Banker Trojan. In all likelihood, the creators of the Trojan themselves became victims of the same virus writers, and the Win32 / Spy.Banker program was compiled by hackers in the Delphi environment on computers infected with the Win32 / Induc.A virus.
Win32 / Induc.A is completely harmless, but it is of interest with its distribution mechanism. First, the Delphi environment becomes infected, as a result of which programs compiled on the infected computer also become carriers of the virus code. ESET ThreatSense.Net early warning system detected more than 30,000 unique samples of Win32 / Induc.A malware during the first 24 hours after the virus was added to the signature database on August 18, 2009.
Another interesting feature of the virus was that it also spreads with the Win32 / Spy.Banker Trojan. In all likelihood, the creators of the Trojan themselves became victims of the same virus writers, and the Win32 / Spy.Banker program was compiled by hackers in the Delphi environment on computers infected with the Win32 / Induc.A virus.