recursal/Fanatic-Fandom huggingface dataset:
Onebieniscenter

Onebieniscenter is a malware program. It advertises free online games, but when you click on the website, it tells you to click "You are not a robot". Clicking it causes the program to slow down your computer and rapidly spam fake malware alerts. Clicking on a malware alert will cause it to download a virus onto your computer. To counter it, reset your browser settings and do a malware scan to remove it.
ILOVEYOU

email

**ILOVEYOU**, sometimes referred to as the Love Bug or Love Letter to You, is a computer worm that infected more than ten million Windows computers on and after May 5, 2000.

It began spreading as an email message with the subject line "ILOVEYOU" and the attachment: "LOVE-FOR-YOU.TXT.vbs."  At that time, Windows computers would often hide the file extension (" VBS," a type of interpreted file) by default because it was an extension for a file type Windows was aware of, making users unwittingly think it was a normal text file.

## Actions

Opening the attachment activates the Visual Basic script.  First, the worm causes damage to the local machine, overwriting random files (including Office files and image files; however, it hides the MP3 files instead of deleting them), then, it sends itself to everyone in the Windows Address Book used by Microsoft Outlook, allowing it to spread faster than previous email worms.

**NOTE: Developing malware is illegal and can result in legal consequences. This page is for informational purposes only. Do not use this information to develop malicious programs.**
Ransomware

**Ransomware** is a type of malware that threatens to permanently block access to the victim's personal data unless a ransom is paid. Ransomware attacks usually use a Trojan that tricks the user into downloading or opening when it arrives as an email attachment.

## Types of Ransomware

### Screen lockers

Screen locking ransomwares block access to an infected system, displaying the ransom note whenever the user tries to log in or start up the computer. These ransomwares often use social engineering, such as displaying a message claiming that it (the computer) was used for something illegal; examples of this include VirLocker and Koler. Screen lockers tend to be easier to recover from, because they don't do damage to personal data.

### Encryptors

Encryptors are the most common type of ransomware; like their name suggests, they encrypt the user's personal files and demands payment in order to decrypt the files. These ransomwares can sometimes threaten to delete the victim's files after a certain amount of time.

## Ransomware as a service (RaaS)

Ransomware as a service (RaaS) is when ransomware developers sell their ransomware to "affiliates", this is like Software-as-a-Service, but with ransomware. Examples of RaaS include Sodinokibi and LockBit.
Anti-malware software

*This article is about a type of security software. For anti-malware application, see Malwarebytes Anti-Malware.*
As malware attacks become more frequent, attention has begun to shift from viruses and spyware protection, to malware protection, and programs have been developed to specifically combat them.

Anti-malware programs can combat malware in two ways:

1. They can provide real time protection against the installation of malware software on a computer. This type of spyware protection works the same way as that of anti-virus protection in that the anti-malware software scans all incoming network data for malware software and blocks any threats it comes across.
2. Anti-malware software programs can be used solely for detection and removal of malware software that has already been installed onto a computer. This type of anti-malware software scans the contents of the windows registry, operating system files, and installed programs on a computer and will provide a list of any threats found, allowing the user to choose what which files to delete or keep, or compare this list to a list of known malware components, removing files which match.

Real-time protection from malware works identically to real-time anti-virus protection: the software scans disk files at download time, and blocks the activity of components known to represent malware. In some cases, it may also intercept attempts to install start-up items or to modify browser settings. Because many malware components are installed as a result of browser exploits or user error, using security software (some of which are anti-malware, though many are not) to "sandbox" browsers (essentially babysit the user and their browser) can also be effective to help restrict any damage done.

## External links

Quttera's malicious content detection technology

Shellcode detection and code break-down
Daddy

**Daddy** is a memory resident infector of MS-DOS .COM and .EXE files, including command.com. Daddy's features include encryption targeted against certain anti-virus products, deletion of anti-virus checksum databases and directory stealth. It is a member of Qark's "Incest family" that also includes Mummy, Sister and Brother.

## Behavior

Daddy goes memory resident by reducing the size of MCB (Memory Control Block) of the host if this is the last MCB in the chain. Daddy then creates its own MCB with owner field set to 0x0008 - command.com and hooks the INT 21h vector directly. Daddy's decrypter plays a trick with the CPU prefetch to hamper debugging, as well as F-PROT anti-virus and TBCLEAN (generic disinfection utility included with Thunder-Byte Anti-Virus).

Daddy infects files when they are executed or opened, or when their dates or attributes are queried. Daddy also executes it directory size stealth on FCB findfirst/findnext calls. Daddy uses fairly standard algorithms when infecting .COM and .EXE files, and differentiates between these two file formats using the file extension The virus seems to only handle upper-case extensions. Files were marked as infected by setting the time-stamp value equal to the date-stamp Daddy additionally deletes several anti-virus checksum databases: 'ANTI-VIR.DAT' (ThunderByte Anti-Virus), 'MSAV.CHK' (Microsoft Anti- Virus), 'CHKLIST.CPS' (Central-Point Anti-Virus) and 'CHKLIST.MS (Microsoft Anti-Virus). Daddy includes the text strings:

```
[Incest Daddy]
by Qark/VLAD

```

## Sources

Original research by JPanic aka @JPanicVX
Storm Worm

Storm Worm is a trojan backdoor that affects computers running Windows, it was discovered on January 17, 2007. It began attacking thousands of computers on January 19, 2007, using an email with a subject line about a storm in Europe.

## Subject lines

Originally propagated in messages about a windstorm in Europe, this worm has been seen also in emails with the following subject lines:

* 230 dead as storm batters Europe. (Hence the name "storm worm")
* A killer at 11, he's free at 21 and kill again!
* U.S. Secretary of State Condoleezza Rice has kicked German Chancellor Angela Merkel
* British Muslims Genocide
* Re: Your text
* Radical Muslim drinking enemies' blood.
* Chinese/Russian missile shot down Russian/Chinese satellite/aircraft
* Saddam Hussein safe and sound!
* Saddam Hussein alive!
* Venezuelan leader: "Let's the War beginning".
* Fidel Castro dead.
* If I Knew
* FBI vs. Facebook

## Payloads

### Botnetting

The infected machine becomes merged into a botnet, while most botnets are controlled through a central server, Storm Worm uses a botnet that acts similarly to a peer-to-peer network, with no centralized control. Each compromised machine has a list of a subset of the entire botnet - around 30 to 35 other compromised machines. While each of the infected hosts share lists of other infected hosts, no one machine has a full list of the entire botnet, making it difficult to figure out how big the entire network is.

### Rootkit

Storm worm also installs the rootkit win32.agent.dh. Later variants, starting around July 2007, loaded the rootkit by modifying existing Windows drivers such as tcpip.sys and cdrom.sys to load the rootkit driver module.
Sanity family

**Page protected due to vandalism.**

The **Santy family** is a family of 3 risk level 2 computer worms that (hence the name) were discovered on 21/12/04, and two of them were discovered 25/12/04. They only affect UNIX systems (except for Perl.Santy, which affects UNIX and all Windows systems behind Vista) and spread via a vulnerability in the system.

## The worms

* Perl.Santy: This one could probably be considered the middle one because while it doesn't do much, it affects not just UNIX, but all Windows systems except for Vista. It was discovered 21/12/04.
* Perl.Santy.B This one isn't very harmful, as it only infects UNIX computers. It deletes ssh. and bot. files. It was discovered 25/12/04.
* Perl.Santy.C This one is considered the deadliest one because it can let a remote hacker control the computer, but still, it only affects UNIX computers. It was discovered the same day as Santy.B.

## Damge Rankings

1. Perl.Santy.C - lets hackers into computer
2. Perl.Santy.A - deletes some files and modifies Internet Settings
3. Perl.Santy.B - only deletes specific file types
Lycorisradiata

**Lycorisradiata** is an encrypting ransomware, it is distributed via fake copies of a game called *King of Glory*.

After running the initial app, it hides it's original icon and reappears as "Lycorisradiata". it also changes the wallpaper and encrypts and renames all files on the device.

## Ransom Note

When the user opens the app, it shows the ransom note; the text is in Chinese and translates to:

"Some important files on my phone that have been asked for you have been encrypted by me.Photos, image documents, compressed files, video files, txt files, etc., almost all types of files are encrypted, so can not be opened normally and this is essentially different from general file corruption. You can find the way to recover files online. I can guarantee that without our decryption service, even if the old grandfather comes, I can't restore these documents.

Is there a way to restore these documents?

Of course, there are recoverable methods that can only be recovered through our decryption service. I am guaranteed by personality and can provide safe and effective recovery services. However, this fee cannot be postponed indefinitely. If you are relieved, I will never lie to you. Is it possible to pay a fixed amount of payment at any time, will it be restored? Of course not, the longer the delay in payment is not good for you. It is best to pay the payment within 3 days. After three days, the fee will be doubled. If you don't pay within one week, it will never recover. By the way, I forgot to tell you that for the poor who have no money to pay for more than half a year, there will be free activities to resume. Whether it is your turn, it depends on how your luck is.

Payment method

We support scanning QR code payment, please click (Check Payment) button and then screenshot scan code payment we have QQ payment, WeChat payment Alipay payment should pay attention to: payment and can not be lower than the amount displayed on the window after payment, please click ( Copy) After copying the serial number, click on Contact Us to send the serial number and payment success billing screenshot to the author. After the account is successfully submitted, the author will give you a bunch of keys waiting for the bottom of the (Decrypt) button, at the bottom of the input. Enter the key in the box and click the (Decrypt) button to start redemption immediately.

Contact Information

If you need our help, please click (Contact Us) or (Join Us) and send us a message.

I strongly recommend that in order to avoid the trouble of refuting, before the end of the work. Do not turn off or remove the software, and suspend the anti-virus software. For whatever reason, if the software is removed, it may result in no information after payment."

## Trivia

The ransom message looks very similar to WannaCry
STOP/Djvu

ransom note

**STOP/Djvu** is an encrypting ransomware that has existed since 2019. It has about 600 variants, which usually change the file extension.

It checks the computer's country code and will not run if it is on the following list:

* RU –Russia
* BY – Belarus
* UA – Ukraine
* AZ – Azerbaijan
* AM – Armenia
* TJ – Tajikistan
* KZ – Kazakhstan
* KG – Kyrgyzstan
* UZ – Uzbekistan
* SY – Syria

## Payloads

STOP/Djvu adds a startup item and a registry entry called "SysHelper". After the computer reboots, it begins encrypting files using the salsa20 algorithm. It then makes a file called readme.txt which demands 980 bitcoins. STOP/Djvu also drops other malware, such as infostealers. It changes the file extension on encrypted files.

## Encrypted File Extensions

STOP/Djvu has about 600 variants, most of them change what file extension is added to the encrypted files. Here is a list of some of them:

* .djvu
* .voom
* .erif
* .mme
* .tiwi
* .tisc
* .rrcc
* .darj
* .saba,
* .sato
* .fofd
* .boza
* .bora
* .nusm
* .xaro
Barkkoal

**Barkkoal** is a Fire Pokémon.

Barkkoal evolves into Howlloal when exposed to a Fire Stone.

**Type** Fire

**Ability** Flash Fire

**Gender Ratio** 60% male, 40% female

**Height** ??? m

**Weight** ??? kg

**Pokédex Entry**

Their acute sense of smell allows them to detect hidden weapons with ease. The bandanas they wear around their necks are actually a part of this Pokémon's body.

### **Type Effectiveness**

#### **Offensive**

**2x**

Bug

Grass

Ice

Steel

Crystal

**1/2x**

Dragon

Fire

Rock

Water

**0x**

#### **Defensive**

**1/2x**

Bug

Fire

Grass

Ice

Steel

Fairy

Crystal

**2x**

Ground

Rock

Water

**0x**

### **Trivia**

**Design Origin**

Barkkoal is based on a German Shepherd dog.

**Name Origin**

Barkkoal is a combination of *bark* and *charcoal*.
Staff Openings

Thank you for your interest in volunteering! We are currently in need of the following staff. If you are interested (and don't have access to the game), send us a message on wikia. If on the game, simply send a +request or talk to current staff.

### Coder

We need someone to help us set up character generation, a sheet, roller, and so on in the game proper.

### Storytellers

We can always use more staff willing to run interesting and active stories who are familiar with the L5R system.
Espeon

**Espeon** is a Psychic Pokémon.

Espeon evolves from Eevee when leveled up with high friendship during the day. It is one of Eevee's final forms, the others being Vaporeon, Jolteon, Flareon, Umbreon, Leafeon, Glaceon, Sylveon, Crystaleon, Strateon, and Draceon.

### **Pokédex Order**

No. 044 - Flareon / **No. 045 - Espeon** / No. 046 - Umbreon

### **Pokémon Information**

**Species** Sun Pokémon

**Type** Psychic

**Ability** Synchronize

**Gender Ratio** 87.5% male, 12.5% female

**Height** ??? m

**Weight** ??? kg

**Pokédex Entry**

### **Battle Properties**

#### **Offensive**

**2x**

Fighting

Poison

**1/2x**

Psychic

Steel

**0x**

Dark

#### **Defensive**

**1/2x**

Fighting

Psychic

**2x**

Bug

Dark

Ghost

**0x**

### **Trivia**

**Design Origin**

**Name Origin**
Badass

Creator
 Date Discovered
 Place of Origin
 Source Language
 File Type(s)
 Aliases
 Family

**Email.Worm.Win32.Badass** or **Badass** is an email worm that runs on Win32 Operating Systems.

## Behaviour

Badass is a virus-worm that spreads via the Internet using MS Outlook. The worm itself is a Windows EXE file about 25Kb in length, and written in VisualBasic. The worm seems to be based on the "Melissa" macro-virus worm - the functions and sequence of instructions in the worm code are very similar to the "Melissa" source code. It seems that this worm was compiled from a slightly modified "Melissa" source. The worm is transferred via the net in e-mail messages with an infected attachment. The original attachment has the BADASS.EXE name, but it is possible to rename the EXE file manually, and it then will spread with a new name. When an infected message is received and the attached EXE file is executed, the worm gains control and starts its main routine. This routine displays message boxes, then runs the infection routine that opens the Outlook database, obtains e-mail addresses from the Address Book and sends infected messages to the addresses found. The subject in the infected messages contains the subject "Moguh.." and the message body is "Dit is wel grappig! :-)" in Dutch.

The worm does not send messages twice from the same computer. To avoid duplicate spreading, the worm creates a system registry key, and checks it upon each start:

```
HKCU\SoftWare\VB and VBA Program Settings\Windows\CurrentVersion

"CMCTL32"="00 00 00 01"

[Adult only--------------------------------------------------]

```

The first message box displayed by the worm appears as follows:

```
Kernel32

An error has occured probably because your cunt smells
bad. Is this really so?
[ Yes ]   [ No ]

```

Upon the mouse cursor moving to the [No] button, the worm moves this button another place to the left [Yes], and return it back when the mouse cursor moves near to button, and so on until clicking [Yes]:

```
[ Yes ]   [ No ]

[ No ]   [ Yes ]

[ Yes ]   [ No ]

```

So the worm does not allow one to click the [No] button. When the [Yes] button is pressed, the worm displays another message and runs its infection routine:

```
WIN32

Contact your local supermarket for toiletpaper and soap to solve this problem.

[ OK ]

```
SpySheriff

window

**SpySherif** is a rogue antivirus program, it pretends to scan for viruses when it is actually malware.

## Goggle.com

There was a typosquatting website called Goggle.com that, from 2004 to 2007, would show a ton of popup ads, and used the WMF exploit to install SpySherif.

It became a survey website in 2015, a blank page with just "Goggle" in 2017, and a political WordPress blog in late 2019. Goggle.com currently does not seem to have any malware.

## Payloads

* Its scanner shows several fake results, often with cryptic names to scare the user
* The rogue blocks any attempt to connect to the internet
* Attempting to uninstall SpySherif will either fail or cause the computer to restart unexpectedly
* It keeps System Restore from loading
* SpySherif changes the wallpaper to a spyware alert and may change the screensaver to the Blue Screen of Death (BSOD)
* It ends some AV processes as soon as it detects its executables, this is to keep the user from removing the rogue.
* SpySherif blocks Task Manager and Registry Editor, also to keep the user from removing it. This can be fixed by renaming the executables.

## Trivia

* This rogue has several different names, including: BraveSentry, Pest Trap, SpyTrooper, Adware Sheriff, and SpywareNo.

Malware propagation, including fake AVs, are illegal. Do not attempt to replicate this virus or you could be prosecuted under applicable local, state, and federal laws.
How to Apply

Foremost, this game is currently **invite only**. In the future that will change, but for now, while the game is being beta-tested and improved, we are not accepting applications.

## Step 1

Read the Welcome page and MUX Rules. It is assumed you agree with and will abide by all of the expectations and rules discussed therein when you create your application.

## Step 2

Read through the various setting pages and make sure you gel with our theme. Folks on the game are very helpful, but if you ask questions that are explicit on the wiki, they'll likely just link you to the wiki, so give everything a good once-over.

## Step 4

Please use the Application Template to create your wikipage. This should be a fairly simple matter of cut, paste, and fill in the blanks. Please make sure everything is completed (particularly the background) unless a field is stated as being optional. Put the page in Category:Character Concepts while you're working on it, and once you're done move it to Category:Pending Characters. Don't worry too much about getting everything perfect, and also don't hesitate to ask for help if the formatting is confusing to you. Our wiki-overseer gets bored a lot and will happily do a formatting pass on your pages for you.

## Step 5

If you haven't yet already, log on to the game and create your character body. Make sure the name fits within our theme. Names like 'TheAwesomeOne' or 'BestSamurai' will be @nuked after a friendly warning. Then, create a +job with the title APP OK to notify the staff that your wiki page is ready for viewing, and a wizard will contact you to begin the approval process.
BSOD

Creator
 Date Discovered
 Place of Origin
 Source Language
 File Type(s)
 Aliases
 Family

**Trojan.Win32.BSOD** or **BSOD** is a trojan that runs on Win32 Operating Systems.

## Behavior

When executed, the trojan displays a fake BSOD screen. Upon restart, Windows32 will run ScanDisk, and will proceed to boot. However, This trojan also installs the same fake BSOD at startup. It will write its own code into "HKEY\_LOCAL\_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run" under the "\_system" value. It will also drop an application titled "\_system" in C:\Windows\

## Removal

1. Boot into Safe Mode
2. Launch RegEdit
3. Navigate to "HKEY\_LOCAL\_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run" and delete the "\_system" value
4. Delete the copy of the file in the Windows directory
5. Upon restart, the system will be as normal, here you can delete the shortcut on the desktop.
WannaCry Ransomware

ransom note

The WannaCry ransomware attack was a worldwide cyberattack in May 2017 by the **WannaCry ransomware cryptoworm**, which targeted computers running the Windows operating system by encrypting data and demanding ransom payments in Bitcoin.

## EternalBlue exploit and propagation

WannaCry spread using EternalBlue, an exploit in the SMB Protocol. This exploit was discovered and developed by the U.S. National Security Agency (NSA), for older Windows systems. Get bamboozled.

EternalBlue was stolen and leaked by a group called The Shadow Brokers at least a year prior to the attack. While Microsoft had released patches previously to close the exploit, much of WannaCry's spread was from organizations that had not applied these, or were using older Windows systems that were past their end-of-life.

## Payloads

WannaCry is a ransomware cryptoworm. It encrypted the user's files and demanded a payment of $300 in Bitcoin to get them back. It also changes the wallpaper.

## Kill switch domain

A few hours after WannaCry started spreading, a security researcher discovered that the ransomware would only encrypt files if it couldn't connect to a gibberish domain name (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com). When he registered it, that stopped the worm from spreading.

This kill switch was suspected to be a way to detect if the virus was ran in a sandbox

## Trivia

* It started spreading on Friday, May 12, 2017
Dialer

A **dialer** is a piece of software which is designed to dial the telephone automatically.

Automated dialers store names and telephone numbers and enable to you easily contact people without remembering phone numbers.

Most automated dialers will retrieve contact information from other databases, such as your Microsoft Outlook Contacts list.

Some automated dialers will also dial a telephone number at regular intervals until a person answers the phone. When the person answers the telephone, the automated dialer will sound an alarm to let you know that the called party is on the line.

## Malicious uses

A spyware dialer is a malicious program that installs itself onto a computer and attempts to dial telephone lines at other locations, often incurring expensive phone bills for the victim. A dialer is very different than spyware, which is typically bundled with free software downloads. They are however, difficult to detect or prove that the dialer is responsible for the charges. It is also difficult to distinguish a legitimate dialer from a spyware dialer, a factor that has made this issue much harder to control.
ARF-ARF

A very early Trojan Horse designed for the IBM PC called ARF-ARF was downloaded from BBS sites and claimed to “Sort” the DOS Diskette Directory. This was a very desirable feature because DOS didn’t list the files in alphabetical order in 1983. Instead, the program deleted all of the files on the diskette, cleared the screen and typed ARF – ARF. ARF was a reference to the common “Abort, Retry Fail” message you would get when a PC could not boot from a diskette.
Spyware

**Spyware** is a type of malware that performs certain behaviors such as advertising, collecting personal information, or changing the configuration of your computer, generally without appropriately obtaining your consent first.

Spyware is often associated with software that displays advertisements (called adware) or software that tracks personal or sensitive information.

That does not mean all software that provides ads or tracks your online activities is bad. For example, you might sign up for a free music service, but you "pay" for the service by agreeing to receive targeted ads. If you understand the terms and agree to them, you may have decided that it is a fair tradeoff. You might also agree to let the company track your online activities to determine which ads to show you.

Other kinds of spyware make changes to your computer that can be annoying and can cause your computer slow down or crash.

These programs can change your Web browser's home page or search page, or add additional components to your browser you don't need or want. These programs also make it very difficult for you to change your settings back to the way you originally had them.

Aside from the questions of ethics and privacy, spyware steals from the user by using the computer's resources and also by eating bandwidth as it sends information back to the spyware's server via the user's Internet connection. Because spyware is using memory and system resources, the applications running in the background can lead to system crashes or general system instability.

Because spyware exists as independent executable programs, they have the ability to monitor keystrokes, scan files on the hard drive, snoop other applications, such as chat programs or word processors, install other spyware programs, read cookies, change the default home page on the Web browser, consistently relaying this information back to the spyware author who will either use it for advertising/marketing purposes or sell the information to another party.

Licensing agreements that accompany software downloads sometimes warn the user that a spyware program will be installed along with the requested software, but the licensing agreements may not always be read completely because the notice of a spyware installation is often couched in obtuse, hard-to-read legal disclaimers.

## References

1. ↑ Spyware and Adware - Unwanted Software Microsoft Security - Published: October 23, 2006
2. ↑ What is spyware? Webopedia
Crab Clan

Current Members
*None*

Current Members
*None*

Current Members
*None*

Current Members
*None*

Current Members
*None*
## Crab "Wall Slang"

Maru
The minimum time it takes an invulnerable oni to kill an armored man; approximately two seconds. "These guards will gives us maybe ten **maru**."
Koma (pony)
Non-Crab sent temporarily to the Wall to be taught a lesson.
Iye, dozo, osakini
"No, please, after you," a phrase used around annoying **koma**.
Mami! (deceiver)
"There is a body-possessor or shapechanger among us. Take up standard positions."
Dairyo! (big catch)
A multitude of goblins, ogres, and oni are coming.
Kanashiki! (anvil)
The oni is only hurt by jade.
Banjaku! (big rock)
The oni is only hurt by crystal.
Saiganki! (rock crusher)
The oni isn't hurt by crystal or jade.
Suihi! (liquid manure)
The oni is insubstantial or can go through walls.
Rutsubo! (melting pot)
The oni gets stronger the more it eats.
Yamijiai
"Fighting unknown assailants; the situation is a mess." Equivalent to the American military term "FUBAR."
Tsuta (ivy)
"The teahouse we are in is staffed by Shadowlands creatures in disguise. All the women around you are demons. They don't suspect I'm on to them. Say nothing. Grab your weapons. Meet me at the front door."
Yasha! (demon women)
As above, but "the game is up; fight your way out."
Naked

Creator
 Date Discovered
 Place of Origin
 Source Language
 File Type(s)
 Aliases
 Family

**Email-Worm.Win32.Naked** or **Naked** (also known as **NakedWife**) is a worm that spreads through email on Win32 Operating Systems.

## Behavior

Naked is an Internet worm spreading via e-mail by sending infected messages from infected computers. While spreading, the worm uses MS Outlook, and sends itself to all addresses that are stored in the MS Outlook Address Book. The worm itself is a Win32 application about 70K in length, written in VisualBasic.

When run (if a user clicks on an attached infected file), the worm sends its copies by e-mail, and performs the following destructive action: the worm deletes all .INI, .LOG, .DLL, .EXE, .COM, .BMP in Windows and Windows system directory.

The worm does not install itself into the system and does not touch system registry. This is "direct action" worm that performs its action only once being activated from infected message. The worm copies itself to Windows TEMP directory, but does not use that copy.

When run, the worm displays a fake window with a "Macromedia Flash Player" picture in it, and it displays the JibJab logo and a Loading message in an endless loop.

The menus in the window do not summon any action when they are selected, except the "Help" menu. Upon selecting it, the "About Macromedia Flash Player 5..." item appears, when that item is selected, the worm displays the message box:

```
Flash
You're are now FUCKED! (C) 2001 by BGK (Bill Gates Killer)

[ OK ]

```

The worm sends itself as an e-mail message with an attached EXE file that is the worm itself. The message consists of:

**Subject**: Fw: Naked Wife

My wife never look like that! ;-)
Best Regards,
[CurrentUser]
Attached file name: NakedWife.exe

*Note : [CurrentUser] is the name of the sender.*
Being activated by a user (by double clicking on an attached file), the worm opens MS Outlook, gains access to the Address Book, obtains all addresses from there and sends messages with its attached copy to all of them. The message subject, body and attached file name are the same as above.
Bushido

## The Code of Bushido

### Gi (Honesty)

In Rokugan, truth measures the meaning of life so adhering to the truth defines the course of a samurai's existence. However, common sense accepts that those who lead an honorable life carry within them a pure soul and thus have nothing to fear from the truth. Lies are a tool of the weak and shameful. Even the most dishonest courtier would heartily agree, as misdirection crafted from half-truths works much better than a lie.

### Yu (Courage)

Samurai and shugenja place their lives on the line for their lord, and even the courtier in the protected heart of Otosan Uchi must take risks that could lead to the downfall of his house and family. Fear touches the hearts of all who must stand for what they hold dear, but the samurai must stand above his emotion. Courage is not the absence of fear, or the willingness to throw one's life away in the face of impossible odds, but the ability to continue onward regardless.

### Jin (Compassion)

A wise person tempers power with mercy. A great leader won't overwork and tax his peasants towards selfish ends. So, too, are the wisest samurai those who understand that mercy is a fundamental principle of the Celestial Order, and the law of the Emperor. A samurai who spares the life of an enemy proves himself the better man.

### Rei (Courtesy)

Though strength of arms is the domain of the samurai, respect must also take its place, as the Empire would quickly dissolve into chaos without a strong tradition of courtesy.

### Meyo (Honor)

Honor is the binding force that defines all samurai, the shining virtue that elevates them above the common man. Honor cannot be truly defined, for those without any concept of Honor will never understand.

### Makoto (Sincerity)

For a samurai, word and action coincide to complete the true meaning of sincerity. A samurai need not make promises, for every word he speaks should breathe sincerity. A samurai's word is the cornerstone of his reputation, and cannot be violated.

### Chugo (Duty)

All that exists has a purpose: to recognize and fulfill that purpose insures the virtue of duty. Even the Emperor must bow before the might of the Heavens, and a samurai can do no less than follow his example.

## "Shourido"

Shourido is not officially recognized within Rokugan, and most traditional samurai regard its teachings with nothing but horror and contempt. Those of a less honorable nature, however, often succumb to its sinister appeal.

Shourido has its own set of seven Dark Virtues: Control, Determination, Insight, Knowledge, Perfection, Strength, and Will. As their names imply, embracing these alternative "virtues" is an explicit rejection of Bushido, for they emphasize personal achievement, power, and advancement, regardless of the cost to oneself or to others. There is no room in Shourido for loyalty or duty, no room for respecting one’s peers or protecting the weak--it is a corrupting code designed to undermine the Rokugani social and moral order, promoting selfishness, ambition, and treason.
MUX Rules

All MUSH participants must abide by the following Rules. Yes, even Wizards. Please report serious infractions to the wizcorps.

## Rules

1. Read and abide by the Conduct and Disclaimer.
2. Read and abide by the Lounge and Channel Rules.
3. Don't be a jackass.
4. If you have something potentially disturbing to link or say, please warn ahead of time.
	* "Gross stuff incoming!"
	* "Warning, spiders"
5. Wizard characters get absolutely no leg up on regular PCs. Ever.
6. Please try to type to the best of your ability. Using appropriate grammar and so on just makes a world of difference when trying to communicate effectively with other people. That said, don't be intimidated: We fool around and make amusing typos all the time.

### Lounge Rules

1. All discussion in the Guest Lounge should be rated no higher than "PG-13," period. We want the Guest Lounge to remain a clean, welcoming place.
2. All discussion in the main OOC Room should be rated no higher than "PG-13." Occasional forays into "R"-land is okay, but be reasonable, folks: Some people MUSH from work and we don't want to get them into trouble; we also want the lounge to remain a friendly, stress-free environment.
	* The "NSFW" channel exists for a reason, take all your filthiness there, you'll be in good company.

### Channel Rules

1. When someone asks you to take it to another channel, do so politely and without judgment.
2. As always, be polite and courteous.

## Punishment

We have a three strike policy here. A strike is earned by violating our rules in some way. Each infraction is dealt with by a vote from the wizteam as to whether or not to award the strike. On the third and final strike, a further vote is given to determine punishment. The punishment is determined by the severity of the infractions, the behavior of the player in question, and other factors to which the wizteam reserves the right to refer. Banning may be among the options discussed, and is never a fun prospect, so please just don't make us have to go there.
Idle Policy

The following includes our policy on idling.

## Idledest

The Wizzen reserve the right to @dest (destroy) a character after 30 days of idle time if they have not been previously notified of a vacation or hiatus. The approximate period of time for said vacation or hiatus should be worked out with your application wizard or sphere wizard.

In practice, we're usually very lenient with idle times, but for the sake of making clear policy, we will stand by the above in the case of concern or disagreement.

## Idling On the Grid

Don't do it. If you're not using an IC space, please remove yourself to a private room or the OOC lounge so that space remains open to other players.

## Idling In the Lounge

While strictly not a problem, preferences wander. General consensus seems to be, if you know you're not going to be around for an extended period of time, just log off or move to a private room so people know for certain you aren't available.
Lapras

**Lapras** is a dual-type Water/Ice Pokémon.

Lapras evolves from Luzlis when exposed to a Water Stone.

### **Pokédex Order**

No. 031 - Luzlis / **No. 032 - Lapras** / No. 033 - Onix

### **Pokémon Information**

**Species** Transport Pokémon

**Type** Water/Ice

**Ability** Water Absorb / Shell Armor

**Gender Ratio** 50% male, 50% female

**Height** ??? m

**Weight** ??? kg

**Pokédex Entry**

### **Type Effectiveness**

#### **Offensive**

**4x**

Ground

**2x**

Fire

Rock

Dragon

Flying

Grass

**1/2x**

Dragon

Grass

Water

Fire

Ice

Steel

**0x**

Crystal

#### **Defensive**

**1/2x**

Fire

Ice

Water

**2x**

Electric

Grass

Crystal

Fighting

Rock

**0x**

### **Trivia**

**Design Origin**

**Name Origin**
Poison (Type)

The **Poison Type** is one of the nineteen Pokémon Types.

Grass

Fairy

**1/2x**

Ghost

Ground

Poison

Rock

**0x**

Steel

Bug

Fighting

Grass

Poison

**2x**

Ground

Psychic

**0x**

### **Other Types**

Normal / Fighting / Flying / **Poison** / Ground / Rock / Bug / Ghost / Steel / Fire / Water / Grass / Electric / Psychic / Ice / Dragon / Dark / Fairy / Crystal
Glaceon

**Glaceon** is an Ice Pokémon.

Glaceon evolves from Eevee when leveled up near an Ice Rock. It is one of Eevee's final forms, the others being Vaporeon, Jolteon, Flareon, Espeon, Umbreon, Leafeon, Sylveon, Crystaleon, Strateon, and Draceon.

### **Pokédex Order**

No. 047 - Leafeon / **No. 048 - Glaceon** / No. 049 - Sylveon

### **Pokémon Information**

**Species** Fresh Snow Pokémon

**Type** Ice

**Ability** Snow Cloak

**Gender Ratio** 87.5% male, 12.5% female

**Height** ??? m

**Weight** ??? kg

**Pokédex Entry**

### **Battle Properties**

#### **Offensive**

**2x**

Dragon

Flying

Grass

Ground

**1/2x**

Fire

Ice

Steel

Water

**0x**

#### **Defensive**

**1/2x**

Ice

**2x**

Fighting

Fire

Rock

Steel

**0x**

### **Trivia**

**Design Origin**

**Name Origin**
Polteerie

**Polteerie** is a Ghost Pokémon.

Polteerie is not known to evolve into or from any other Pokémon.

**Type** Ghost

**Ability** Aftermath

**Gender Ratio** Genderless

**Height** ??? m

**Weight** ??? kg

**Pokédex Entry** This Pokémon haunts the dreams of children. It is known to lead children into dark forests, in which they're never seen again.

### **Battle Properties**

#### **Offensive**

**2x**

Ghost

Psychic

**1/2x**

Dark

Steel

**0x**

Normal

#### **Defensive**

**1/2x**

Bug

Poison

**2x**

Dark

Ghost

**0x**

Fighting

Normal

### **Trivia**

**Design Origin**

**Name Origin**
Dark (Type)

The **Dark Type** is one of the nineteen Pokémon Types.

Ghost

Psychic

**1/2x**

Dark

Fighting

Steel

**0x**

Dark

Ghost

**2x**

Bug

Fighting

Fairy

**0x**

Psychic

### **Other Types**

Normal / Fighting / Flying / Poison / Ground / Rock / Bug / Ghost / Steel / Fire / Water / Grass / Electric / Psychic / Ice / Dragon / **Dark** / Fairy / Crystal
Vaporeon

**Vaporeon** is a Water Pokémon.

Vaporeon evolves from Eevee when exposed to a Water Stone. It is one of Eevee's final forms, the others being Jolteon, Flareon, Espeon, Umbreon, Leafeon, Glaceon, Sylveon, Crystaleon, Strateon, and Draceon.

### **Pokédex Order**

No. 041 - Eevee / **No. 042 - Vaporeon** / No. 043 - Jolteon

### **Pokémon Information**

**Species** Bubble Jet Pokémon

**Type** Water

**Ability** Water Absorb

**Gender Ratio** 87.5% male, 12.5% female

**Height** ??? m

**Weight** ??? kg

**Pokédex Entry**

### **Battle Properties**

#### **Offensive**

**2x**

Fire

Ground

Rock

**1/2x**

Dragon

Grass

Water

**0x**

Crystal

#### **Defensive**

**1/2x**

Fire

Ice

Steel

Water

**2x**

Electric

Grass

Crystal

**0x**

### **Trivia**

**Design Origin**

**Name Origin**
Grass (Type)

The **Grass Type** is one of the nineteen Pokémon Types.

Ground

Rock

Water

**1/2x**

Bug

Dragon

Fire

Flying

Grass

Poison

Steel

**0x**

Electric

Grass

Ground

Water

**2x**

Bug

Fire

Flying

Ice

Poison

**0x**

No. 002 / Constrolly / Grass

No. 047 / Leafeon / Grass

### **Other Types**

Normal / Fighting / Flying / Poison / Ground / Rock / Bug / Ghost / Steel / Fire / Water / **Grass** / Electric / Psychic / Ice / Dragon / Dark / Fairy / Crystal
Steel (Type)

The **Steel Type** is one of the nineteen Pokémon Types.

Ice

Rock

Fairy

Crystal

**1/2x**

Electric

Fire

Steel

Water

**0x**

Bug

Dark

Dragon

Flying

Ghost

Grass

Ice

Normal

Psychic

Rock

Steel

Fairy

Crystal

**2x**

Fighting

Fire

Ice

**0x**

Poison

No. 034 / Steelix *(Mega Steelix)* / Steel/Ground

### **Other Types**

Normal / Fighting / Flying / Poison / Ground / Rock / Bug / Ghost / **Steel** / Fire / Water / Grass / Electric / Psychic / Ice / Dragon / Dark / Fairy / Crystal
Bug (Type)

The **Bug Type** is one of the nineteen Pokémon Types.

Dark

Grass

Psychic

**1/2x**

Fighting

Fire

Flying

Ghost

Poison

Steel

Fairy

**0x**

Fighting

Grass

Ground

**2x**

Fire

Flying

Rock

**0x**

No. 013 / Pupasite / Bug

### **Other Types**

Normal / Fighting / Flying / Poison / Ground / Rock / **Bug** / Ghost / Steel / Fire / Water / Grass / Electric / Psychic / Ice / Dragon / Dark / Fairy / Crystal
Boaple

**Boaple** is a Grass Pokémon. Along with Burnunny and Purreef, it can be received as a Starter Pokémon in the Oloka Region.

Boaple evolves into Constrolly starting at Level 18, which then evolves into Scyllow starting at Level 36.

### **Pokédex Order**

No. 000 - ??? / **No. 001 - Boaple** / No. 002 - Constrolly

### **Pokémon Information**

**Species** Grass Snake Pokémon

**Type** Grass

**Ability** Overgrow

**Gender Ratio** 75% male; 25% female

**Height** 0.5 m

**Weight** 13.6 kg

**Pokédex Entry** This Pokémon is born without knowing how to control its small arms. The large blade of grass on its head acts as camouflage in tall grasses.

### **Type Effectiveness**

#### **Offensive**

**2x**

Ground

Rock

Water

**1/2x**

Bug

Dragon

Fire

Flying

Grass

Poison

Steel

**0x**

#### **Defensive**

**1/2x**

Electric

Grass

Ground

Water

**2x**

Bug

Fire

Flying

Ice

Poison

**0x**

### **Trivia**

**Design Origin**

Boaple is based on a boa constrictor hatchling.

**Name Origin**

Boaple is a combination of *boa* and *maple*, a type of tree.
Ghoulipnir

**Ghoulipnir** is a dual-type Ghost/Bug Pokémon.

Ghoulipnir does seem to have an evolution, but the second stage as well as the method for its evolution is currently unknown.

### **Pokédex Order**

No. 038 - Polteerie / **No. 039 - Ghoulipnir** / No. 040 - [???]

### **Pokémon Information**

**Species** Hybrid Pokémon

**Type** Ghost/Bug

**Ability** Aftermath / Frisk

**Gender Ratio** 100% male, 0% female

**Height** ??? m

**Weight** ??? kg

**Pokédex Entry** Ghoulipnir has the capability of communicating with the dead. It is said to steal a person's soul if they look into its pitch black eyes.

### **Battle Properties**

#### **Offensive**

**4x**

Psychic

**2x**

Ghost

Dark

Grass

**1/2x**

Dark

Fighting

Fire

Flying

Poison

Fairy

**1/4x**

Steel

**0x**

Normal

#### **Defensive**

**1/2x**

Bug

Poison

Fighting

Grass

Ground

**2x**

Dark

Ghost

Fire

Flying

Rock

**0x**

Fighting

Normal

### **Trivia**

**Design Origin**

**Name Origin**
Crystal (Type)

The **Crystal Type** is a new Pokémon Type introduced in Pokémon East and West, bringing the total number of types present in the Region to nineteen (including Fairy).

One of the Crystal-type Pokémon found in the Oloka Region, as well as the Orange Islands in the anime, is the Crystal Onix. Also, the anime shows that Crystal Onix has an immunity to water, as does all other Crystal-type Pokémon. Finding a Crystal Onix in the wild is incredibly rare, and unlike regular Onix, Crystal Onix cannot evolve.

### **Battle Properties**

#### **Offensive**

**2x**

Water

Normal

**1/2x**

Fire

Rock

Ground

Steel

**0x**

#### **Defensive**

**1/2x**

Normal

Flying

**2x**

Fire

Rock

Ground

Fighting

Steel

**0x**

Water

### **Pokémon**

#### **Pure Crystal-type Pokémon**

No. 026 / Marblit / Crystal

No. 027 / Quartzlice / Crystal

No. 028 / Diamierce / Crystal

No. 050 / Crystaleon / Crystal

#### **Half Crystal-type Pokémon**

##### **Primary Crystal-type Pokémon**

No. 029 / Rucaniby / Glass/Fire

No. 030 / Felapphine / Glass/Water

### **Other Types**

Normal / Fighting / Flying / Poison / Ground / Rock / Bug / Ghost / Steel / Fire / Water / Grass / Electric / Psychic / Ice / Dragon / Dark / Fairy / **Crystal**
Eevee

**Eevee** is a Normal Pokémon.

Eevee evolves into one of eleven different Pokémon through various methods:

Vaporeon when exposed to a Water Stone.

Jolteon when exposed to a Thunder Stone.

Flareon when exposed to a Fire Stone.

Espeon when leveled up with high friendship during the day.

Umbreon when leveled up with high friendship during the night.

Leafeon when leveled up near a Moss Rock.

Glaceon when leveled up near an Ice Rock.

Sylveon when knowing a Fairy-type move and leveling up with two Affection hearts in Pokémon-Amie.

Crystaleon when leveled up with high friendship while holding a Diamond Shard.

Strateon when leveled up with high friendship in the northern regions of Oloka.

Draceon when leveled up with high friendship in the southern regions of Oloka.

### **Pokédex Order**

No. 040 - [???] / **No. 041 - Eevee** / No. 042 - Vaporeon

### **Pokémon Information**

**Species** Evolution Pokémon

**Type** Normal

**Ability** Run Away / Adaptability

**Gender Ratio** 87.5% male, 12.5% female

**Height** ??? m

**Weight** ??? kg

**Pokédex Entry**

### **Battle Properties**

#### **Offensive**

**2x**

**1/2x**

Rock

Steel

**0x**

Ghost

#### **Defensive**

**1/2x**

**2x**

Fighting

Crystal

**0x**

Ghost

### **Trivia**

**Design Origin**

**Name Origin**
Diamierce

**Diamierce** is a Crystal Pokémon.

Diamierce evolves from Quartzlice starting at Level 40. It is the final form of Marblit.

### **Pokédex Order**

No. 027 - Quartzlice / **No. 028 - Diamierce** / No. 029 - Rucaniby

### **Pokémon Information**

**Species** Gemstone Pokémon

**Type** Crystal

**Ability** Crystallize

**Gender Ratio** Genderless

**Height** ??? m

**Weight** ??? kg

**Pokédex Entry**

### **Battle Properties**

#### **Offensive**

**2x**

Water

Normal

**1/2x**

Fire

Rock

Ground

Steel

**0x**

#### **Defensive**

**1/2x**

Normal

Flying

**2x**

Fire

Rock

Ground

Fighting

Steel

**0x**

Water

### **Trivia**

**Design Origin**

**Name Origin**
Burnunny

**Burnunny** is a Fire Pokémon. Along with Boaple and Purreef, it can be received as a Starter Pokémon in the Oloka Region.

Burnunny evolves into Wildhare starting at Level 16, which then evolves into Scorvader starting at Level 35.

### **Pokédex Order**

No. 003 - Scyllow / **No. 004 - Burnunny** / No. 005 - Wildhare

### **Pokémon Information**

**Species** Rabbit Pokémon

**Type** Fire

**Ability** Blaze

**Gender Ratio** 75% male; 25% female

**Height** 1.0 m

**Weight** 20.0 kg

**Pokédex Entry** Burnunny digs underground to feed on coals. Because it's constantly eating coal, its tail flame never goes out.

### **Type Effectiveness**

#### **Offensive**

**2x**

Bug

Grass

Ice

Steel

Crystal

**1/2x**

Dragon

Fire

Rock

Water

**0x**

#### **Defensive**

**1/2x**

Bug

Fire

Grass

Ice

Steel

Fairy

Crystal

**2x**

Ground

Rock

Water

**0x**

### **Trivia**

**Design Origin**

Burnunny is based on a mythical Jackalope.

**Name Origin**

Burnunny is a combination of *bunny* and *burn*.
Constrolly

**Constrolly** is a Grass Pokémon.

Constrolly evolves from Boaple starting at Level 18 and evolves into Scyllow starting at Level 36.

### **Pokédex Order**

No. 001 - Boaple / **No. 002 - Constrolly** / No. 003 - Scyllow

### **Pokémon Information**

**Species** Snake Pokémon

**Type** Grass

**Ability** Overgrow

**Gender Ratio** 75% male; 25% female

**Height** ??? m

**Weight** ??? kg

**Pokédex Entry** Now possessing two heads, Constrolly is twice as smart as its prior form. However, the two heads will often fight with each other.

### **Type Effectiveness**

#### **Offensive**

**2x**

Ground

Rock

Water

**1/2x**

Bug

Dragon

Fire

Flying

Grass

Poison

Steel

**0x**

#### **Defensive**

**1/2x**

Electric

Grass

Ground

Water

**2x**

Bug

Fire

Flying

Ice

Poison

**0x**

### **Trivia**

**Design Origin**

Constrolly is based on a mythical hydra.

**Name Origin**

Constrolly is a combination of *constrictor* and *holly*.