Fandom

Malware Wiki

Qizy Windows E-mail Worm \ Virus (Win32.HLLP.Quizy)

1,327pages on
this wiki
Add New Page
Talk0

From Youtube

Description Edit

Originally known under alias Win32.HLLP.Quizy used by virus author Gigabyte (author is a female if you're still thinking otherwise). However, AV companies have a policy against naming virus or worm which author wanted to use. As I'm using Kaspersky Labs alias, the full alias name by Kaspersky Labs for this worm is Email-Worm.Win32.Qizy.

Other aliases (just names) are: Quiz, Qizy, Izuqy, Quis, Quiz, Belzy

It will infect all files in Personal Folder Shell (by default it's My Documents folder), while it will infect Windows folder only if it's running NT version. Worm drops startup.exe (runs at startup as it's added in Run entry in HKLM and it asks 10 questions which should be answered to find out how to disinfect your PC) and xmas.scr (worm copy) in root folder, Mail.vbs (which is quickly gone, used for sending emails) and jbells.rtx ringtone in System folder.

Infected files run worm and original program by extracting it from infected file under name origfile.exe. However, it's only there for short time, so unless it's copied quickly, it's removed.

Appears on these pages
of

  • Quizy

    Quizy is a viral worm that makes the computer user answer ten questions in order for it to not...

File history

Click on a date/time to view the file as it appeared at that time.

Date/TimeThumbnailDimensionsUserComment
current15:21, June 14, 2014Thumbnail for version as of 15:21, June 14, 201412:06480 × 269 (19 KB)RetroGameFan9000 (wall | contribs)created video

Metadata

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.