Today we have released the news about the spread of the Win32 / Induc.A virus for the Delphi development environment. Not so long ago, the virus was actively discussed on habrahabr .
Win32 / Induc.A is completely harmless, however, it is of interest for its distribution mechanism. First, the Delphi environment is infected, as a result of which programs compiled on the infected computer also become carriers of the virus code. The system of early detection of threats ESET ThreatSense.Net has recorded more than 30,000 unique Win32 / Induc.A malware samples during the first 24 hours since the introduction of this virus into the signature database on August 18, 2009.
Another interesting feature of the virus is that it also spreads along with the Win32 / Spy.Banker Trojan program. In all likelihood, the creators of the Trojan themselves became victims of the same virus makers, and the Win32 / Spy.Banker program was compiled by Delphi hackers on computers infected with Win32 / Induc.A.