First Half of 2008's Most Bizarre Malware

First Half of 2008’s Most Bizarre Malware

Written By
Matthew Hines
Matthew Hines
Jul 18, 2008
2 minute read
eWeek content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

Anti-virus specialist Panda Security has issued a listing of the most unique and unusual malware specimens that its researchers uncovered during the first six months of 2008.

And much like the crowd of basement-dwelling, fashion-defying miscreants that likely created many of the code samples, the list is populated by some truly strange and perplexing examples.

It would seem that like the range of threats existing on the malware ecosystem today, the broad diversity of nefarious innovation on display among the listed threats is bounded only by the limits of human and technological creativity.

So, without further ado, enjoy the freakish sampling of malware mutations as recognized by PandaLabs.

And the honors go to:

Creepiest: MalwareProtector2008 and AdvancedXpFixer — a pair of malware packages featuring “virtual roaches” that slowly eat the desktops of victimized systems in an attempt to convince them to download security software (what novel marketing!).

Cleanest: Tixcet.A — a worm virus that wipes the hard disks of the computers it subverts.

Top “kidnapper”: PGPCoder.E — a ransomware program that encrypts files on infected machines and demands payment to give them back.

Most romantic: Nuwar.OL, Nuwar.QI and Valentin.E — these Storm Worm and Valentin.E variants targeted the affectionate and lovelorn in trying to dupe recipients.

Most informative: Romeo.C — this malware program serves up real live breaking news headlines to users while secretly subverting their systems.

Top “imposters”: Manclick.A, Manclick.B and Manclick.C — these multistaged attacks pose as legitimate applications while affecting system services and spoofing phishing bank pages that try to collect confidential user info.

Most deceitful: FakeDeath.A — this worm virus announced the death of Cuban President Fidel Castro while silently infecting systems in the background.

Most apocalyptic: RenameLoi.A — this worm predicts the end of days by spamming users with messages about the Antichrist and Judgment Day.

Coolest pig: MSNWorm.EI — this attack displays a picture of a makeup-wearing pig whilst carrying out its nefarious payloads.

Noisiest: BeepBeep.A — hardly stealthy, this threat taunts affected users with a stream of grating audio cues.

What the second half of ’08 will bring, one can only imagine.

Until then enjoy the piggy picture and beep-beep noises while those roaches eat your desktop that carries all those interesting news items, at least the ones you can read around the virtual roaches.

Matt Hines has been following the IT industry for over a decade as a reporter and blogger, and has been specifically focused on the security space since 2003, including a previous stint writing for eWEEK and contributing to the Security Watch blog. Hines is currently employed as marketing communications manager at Core Security Technologies, a Boston-based maker of security testing software. The views expressed herein do not necessarily represent the views of Core Security, and neither the company, nor its products and services will be actively discussed in the blog. Please send news, research or tips to SecurityWatchBlog@gmail.com.

eWeek Logo

eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site's focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

Property of TechnologyAdvice. © 2026 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.