VIRUS NAME: VBS/Chick.b@M
Virus
Characteristics
This threat is not
in the wild and considered to be a low risk. It is currently detected
with the 4150 DATs (or newer) as VBS/Generic@MM when scanning compressed
files. Exact detection under the VBS/Chick.b@M name will be included in
the 4195 DATs.
This Compiled HTML Help file contains VBScript to email itself to the
first user in the Microsoft Outlook address book using MAPI messaging.
It arrives in an email message containing the following information.
Subject: RE:Nuevo video de Caifanes
Body: Caifanes regresa y te muestra su nuevo video musical
Regards,
%senders name%
Attachment:
Name of .CHM file run (typically CAIFANES.CHM)
Symptoms
Presence of the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\chm
Method Of Infection
This script virus is contained in a Compiled HTML Help file. When the
.CHM file is accessed, the script is run.
|
