| Name: | Chode |
| Aliases: | BAT/911-A, BAT/911-B, BAT.Chode.Worm, W95/Firkin.worm, Foreskin, BAT911, 911, DickHair, Bat/Firkin.A, Bat/Firkin.B, Firkin, Chode 911, |
| Ports: | 137, 138, 139 |
| Files: | Chode.bat - Random.bat - Cu##ent.bat - Current.bat -Ashield.pif - Netstat.pif - Winsock.vbs - Mstum.bat - |
| Created: | Mar 2000 |
| Requires: | |
| Actions: | Worm / Autodialing trojan / Destructive trojan / Network trojan |
| Propagates to shared drives. Creates hidden subdirectories called \chode, \dickhair and \foreskin. May alter Autoexec.bat and format all hard drives. Autodials 911. On the 19th of the month it will delete all files in several essential directories. | |
| Versions: | 1.07c, A, B, |
| Registers: | |
| Notes: | Works on Windows 3.x, 95 and 98 (maybe also on NT). |
| Country: | |
| Program: | Written in DOS batch language. |