<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[W32/Xorala]]></title><description><![CDATA[<p><i><b>This post is being processed/translated. The original version will be shown:</b></i></p><p dir="auto">Pues tras muchos quebraderos de cabeza y mi fea constumbre de no usar con frecuencia el antivirus, se han resuelto todos los problemas de inestabilidad que llevaba arrastrando toda la semana, muchos formateos, testeo de hardware y al final este pequeño intruso estaba en otra particion residente en diversos archivos exe, rutina de reinstalaciones, como drivers, directX…..Aqui os dejo un poco de info sobre la criatura:</p>
<p dir="auto">_Xorala is a harmless non-resident parasitic Win32 virus. It recursively searches for Win32 PE EXE files in the Windows directory and the Windows System directory. It infects files by adding a new section named XOR at the end of the last section of the host, and it appends the virus code to the host. The Xorala virus has an infection size of 2,048 bytes. Files infected once will not be infected a second time.</p>
<p dir="auto">The Xorala virus contains the following strings in its code. These strings can also<br />
be found in infected files:</p>
<p dir="auto">-= XOR 2009 Valhalla =- Assembled 1997 .. Activated 07.2002 - devoted for peace and harmony in universe against war, racism, terrorism and cruel brutality .. remember .. life is the most important thing - not money .. it's time for a revolution NOW …._</p>
<p dir="auto">Que sepas que me has jodio Xorala!</p>
<p dir="auto">:risitas:</p>
]]></description><link>https://foro.hardlimit.com/en/topic/17504/w32-xorala</link><generator>RSS for Node</generator><lastBuildDate>Tue, 07 Apr 2026 02:04:54 GMT</lastBuildDate><atom:link href="https://foro.hardlimit.com/en/topic/17504.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 05 Aug 2003 15:36:42 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to W32/Xorala on Wed, 06 Aug 2003 13:20:08 GMT]]></title><description><![CDATA[<p><i><b>This post is being processed/translated. The original version will be shown:</b></i></p><p dir="auto">Yo tenia el W32/Marburg en el instalador del Getright, no lo descubri hasta q me pase al flshget :risitas: :risitas: :risitas:</p>
]]></description><link>https://foro.hardlimit.com/en/post/193653</link><guid isPermaLink="true">https://foro.hardlimit.com/en/post/193653</guid><dc:creator><![CDATA[KrHonHoS]]></dc:creator><pubDate>Wed, 06 Aug 2003 13:20:08 GMT</pubDate></item><item><title><![CDATA[Reply to W32/Xorala on Wed, 06 Aug 2003 13:05:25 GMT]]></title><description><![CDATA[<p><i><b>This post is being processed/translated. The original version will be shown:</b></i></p><p dir="auto">je je, pues menuda putadita kon el archivo :risitas: :risitas:</p>
<p dir="auto">Saludos</p>
]]></description><link>https://foro.hardlimit.com/en/post/193649</link><guid isPermaLink="true">https://foro.hardlimit.com/en/post/193649</guid><dc:creator><![CDATA[FOBOS]]></dc:creator><pubDate>Wed, 06 Aug 2003 13:05:25 GMT</pubDate></item></channel></rss>