Aliases: W32/BlueBall.A, Win32.BlueBall.4117, Win32/Bballs, PE_BLUEBALL.A
Variants: W95/Blueblobs, W95.BlueCorners, PE_BLUEBALL.B, Virus.Win32.Blueballs.4117, W32/Blueball,

Classification: Malware
Category: Computer Virus

Status: Active & Spreading
Spreading: Moderate
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 21 Jun 2001
Damage: Low

Characteristics: The BlueCorners.2049 program is a virus that infects all executable files of Windows 9x computers. This displays small blue balls in the corner of the screen once it is activated. It uses the memory location allocated to the operating system causing the system to crash.

More details about W95.BlueCorners.2049

The BlueCorners.2049 program activates a backdoor by making connections to an Internet Relay Chat (IRC) channel utilizing its specific IRC client. It then waits for the commands or instructions from a remote hacker. The remote hacker accesses BlueCorners.2049 through IRC channels by utilizing a password-protected concurrence. And once the remote hacker has gained access to a remote computer, he can do simply most everything. He could administer the backdoor’s installation, restrain the IRC client on the compromised machine, download other threats, execute files, send the backdoor Trojan to other channels to take control of other computers, terminate running applications, perform denial of service attacks against other parties and totally uninstall itself by eradicating its pertinent registry entries.

BlueCorners.2049 also monitors the activities of the user without his knowledge and it is not discernible in the log of running applications. The computer as well as the user is at risk once this utility has been launched. A remote attacker may also use the user’s personal information and data for malicious purposes and may even include the compromised computer in bot networks. BlueCorners.2049 has been reported to affect various versions of Microsoft Windows operating system including Windows 95, Windows Millennium Edition, Windows 2000, Windows Server 2003, Windows NT and Windows XP.