Malware type: Macro

Aliases: Virus.VBS.Mcon.e (Kaspersky), VBS/Pica.worm.gen (McAfee), VBS.Sorry.C (Symantec), VBS/Mcon-B (Sophos),

In the wild: No

Destructive: Yes

Language: English

Platform: Windows

Encrypted: No

Description: 
This destructive macro worm propagates via network drives and Internet Relay Chat (mIRC). It overwrites the SCRIPT.INI file of the infected computer so that it functions as a server program that is controlled by a remote hacker. This virus carries a payload of changing the Internet Explorer startup page to www.zonelabs.com.

For additional information about this threat, see:
Solution
Technical Details

Description created: Dec. 18, 2000 10:10:14 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.