TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
VBS_FIREBURN.A
Overview

Malware type: VBScript

Aliases: Email-Worm.VBS.Fireburn (Kaspersky), VBS/Generic (McAfee), VBS.Fireburn.A (Symantec), VBS/Fireburn (Avira), VBS/Fireburn-A (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows

Encrypted: No

Overall risk rating:


Description: 

This VB Script virus is currently in the wild. It spreads via Microsoft Outlook and mIRC and the email maybe in German or English. The email has the subject header: “;Hi, how are you?”; and comes with an attachment that may have one of several file names. If the current system date is June 20th, the virus modifies registry and disables mouse and keyboards. It also displays a message before it modifies the registry. This virus runs using Windows Scripting Host (WSH). To execute, this virus uses the file WScript.EXE or CScript.EXE. Once this file has been disabled (eg. Deleted/Renamed/Moved), the virus no longer runs.

For additional information about this threat, see:
Solution
Technical Details

Description created: May. 30, 2000 4:38:01 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.