Win32/Shoerec is a new Win32 virus which has been posted to several newsgroups under names such as fun.exe, funny.exe, avanti.exe, and punch.exe among others.

This virus is a polymorphic PE infector with attacks targeted at files with specific letter composition of filename.

Infected files increase in size by about 9k bytes. Some infected files have been observed to be corrupted by the virus and are unable to be executed. The virus spreads by executing an infected file. A typical scenario would be for a user to download a shockwave file from an internet news group and execute it. Infected files have been posted to over 50 newsgroups under various subjects.

Typical subjects are:

{{***THERE IS NO FEE TO GET THE DEMO***}}

{{{{ SURF OUR WEB!!! ENJOY THE BOXING!!! }}}

_G_O_O_D__P_L_A_C_E__F_O_R__G_O_O_D__P_E_O_P_L_E_ !

Cannibal Ferrox{Umbert Lenzi} quality 9/10.fully uncut 90 mins ///// CANNIBAL FERROX \\\\ ((((( DEADBEAT AT DAWN ))))))

(( GET THE FULL DEMO!!! )) _Find_wife_/_husband_/_friend_abroad_or_ at_ home_!

.