Fagot

IRC-Worm.Win32.Fagot or Fagot is a worm that runs on Internet Relay Chat (IRC) program with 32-bit Windows operating systems..

Behavior
This virus would would spread over IRC, however this routine has long since stopped working since the worm originally downloaded this file from a server that has been deleted. This would just be the end result of an infection prior to the worm spamming itself to every IRC channel it could find.

Payload(s)
When the user runs the program, usually when they receive the file through IRC, it will pop up many errors. Including:
 * svchost.exe crashing claiming memory could not be written with the instructions deriving from thread 0x71a64618
 * A Windows Protection Error, indicating that multiple critical files have been overwritten
 * Finally, an error in memory block #A5487F (This message is a fake error put out by the worm.)

These errors are all caused by the fact that critical processes have been overwritten with irrelevant data (by deleting things like cmd.exe, regedit.exe, and other files and replacing them with the worm.). If the user now checks the file attributes, they will discover that the file sizes have decreased drastically. If the user tries to run programs, the worm will hide the file and not allow you to run said application.

Upon Restart
As the worm disables the activation of all .exe files, the system will halt upon boot up. It will prompt the user to reinstall Windows. However, reinstalling simply results in multiple errors, and the user will not be able to start, causing multiple Blue Screen of Deaths and damaging the system completely. This will require the user to format and reinstall.