New worm VBS / VBSWG.an @ MM small files

Virus Name: VBS / VBSWG.an @ MM
顥?顥?found date :2002-05-26
顥?顥?found that the State: Turkey
顥?顥?virus Length: 7995 bytes
顥?顥?virus type: VBScript worm
顥?顥?br />Virus Characteristics:

E-mail in the form of the virus to spread, the virus e-mail format:

Subject: Shakira's Pictures

Text: Hi:
i have sent the photos via attachment
have funn ...

Annex: ShakiraPics.jpg.vbs



Annex run, the virus will be sent to the address book Zishen all e-mail addresses, while c: mircscript.ini files will be a series of instructions defined by the virus covered by these directives is mainly given by the infection itself Fasong users in IRC users within the same channel. Another will pop up a dialog box:



The virus also copies itself to the Windows directory and attempted to cover. VBS and. VBE files, then creates the following registry key:

HKEY_CURRENT_USERSoftwareShakiraPicsmailed = 1
HKEY_CURRENT_USERSoftwareShakiraPicsMirqued = 1

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunRegistry = wscript.exe C: WINDOWSShakiraPics.jpg.vbs%
顥?顥?br />Signs of infection:

The registry keys will appear.
顥?顥?br />Mode of transmission:

Outlook address book to send virus email messages, and modifies the mIRC script.ini file to spread through IRC, but also covered. VBS and. VBE files.






相关链接:



Easy DVD CREATOR



AllRipper DVD to YOUTUBE



Convert mp3 to aac



Youtube FLV to QuickTime Home



Open DVD to Youtube



Youtube to LAPTOPS Help



Premier Source Editors



Youtube to Treo Value



Ekos MP3 Minimizer



Geography Education brief



Mts format



avi to 3gp converter FREE download



convert flv to mov



Comments Terminal And Telnet Clients