Threat Descriptions

Vienna.Bua

Classification

Category :

Malware

Type :

Virus

Platform :

-

Aliases :

Vienna.Bua, Bua, Butthead, Big Caibua, Vienna.2279

Summary

This virus was spread through some BBS and ftp sites in May 1995. The virus activates in on May 5th, 1995. At this time it will display a graphic image of phallus. At a later time, the virus will try to cause damage by formatting track zero, deleting the first file in a directory, creating sub-directories with obscene names etc.Bua contains the following texts in encrypted form: 

RABID is Actually NAMBLA.
 Go figure
 High Evolutionary Sucks BIG CAIBUA!
 You bastardize code, I bastardize it again!
Fuck You!
 Difference is you cocksucker, I can actually program in assembler.
 Read about it in VSUM!
 btw, Patty, Howabouts ya lick my BIG CAIBUA?
 Oh, And John, Just in case you think I forgot your sorry ass.
 The next one is for you!!!
Muhahahahahahahahahaha!!!!
 O.J. IS GUILTY!!
 Tempest, Live for yourself.
 You do not know what love is yet.
 wait, it will come.
 No worries.

Vienna.Bua has been distributed on a CD-ROM as well, shareware collection "Night Owl #16" has it in file \051A\BESTSSVR.ZIP.

Removal

Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.

A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:

  • Check for the latest database updates

    First check if your F-Secure security program is using the latest updates, then try scanning the file again.

  • Submit a sample

    After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.

    Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.

  • Exclude a file from further scanning

    If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.

    Note: You need administrative rights to change the settings.

Technical Details

N/A