Description:
This Visual Basic script (VBScript) arrives as attachment to mass-mailed email messages. It may be dropped by other malware. It may also be downloaded unknowingly by a user when visiting malicious Web sites.
It creates registry entries to enable its automatic execution at every system startup. It modifies registry keys/entries as part of its installation routine.
It uses the Messaging Application Protocol Interface (MAPI) to send email messages with a Trojan/JavaScript downloader as attachment. It gathers target email addresses from the Windows Address Book (WAB). It then sends a copy of itself as an attachment to email messages using MS Outlook VBA.
It creates an IRC script that automatically sends message to all users who join the IRC server that it connects to.
For additional information about this threat, see:
Solution
Technical Details
Description created: Feb. 12, 2009 1:10:21 AM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
