Tuesday, July 20, 2010

New worm VBS / VBSWG.an @ MM small files


Virus Name: VBS / VBSWG.an @ MM
顥?顥?found date :2002-05-26
顥?顥?found that the State: Turkey
顥?顥?virus Length: 7995 bytes
顥?顥?virus type: VBScript worm
顥?顥?br />Virus Characteristics:

E-mail in the form of the virus to spread, the virus e-mail format:

Subject: Shakira's Pictures

Text: Hi:
i have sent the photos via attachment
have funn ...

Annex: ShakiraPics.jpg.vbs



Annex run, the virus will be sent to the address book Zishen all e-mail addresses, while c: mircscript.ini files will be a series of instructions defined by the virus covered by these directives is mainly given by the infection itself Fasong users in IRC users within the same channel. Another will pop up a dialog box:



The virus also copies itself to the Windows directory and attempted to cover. VBS and. VBE files, then creates the following registry key:

HKEY_CURRENT_USERSoftwareShakiraPicsmailed = 1
HKEY_CURRENT_USERSoftwareShakiraPicsMirqued = 1

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunRegistry = wscript.exe C: WINDOWSShakiraPics.jpg.vbs%
顥?顥?br />Signs of infection:

The registry keys will appear.
顥?顥?br />Mode of transmission:

Outlook address book to send virus email messages, and modifies the mIRC script.ini file to spread through IRC, but also covered. VBS and. VBE files.






相关链接:



Convert Flv To 3gp



Articles about Browser Tools



A record of random access Recordset



How To Convert Flv To 3gp



AAC CDA to RA



Storage Access Control



ConvertXtoDVD build 1000



Top Web Or Video Cams



Youtube to PSP Ultra



Mkv



X-Cloner DVD to Apple TV



First Financial Weekly: direct supply in the Shadow of Digital China



CONVERT to wmv



Expert Development



X-CLONER DVD to Mobile



Mobile Phone to OGG Creator



No comments:

Post a Comment