|
|
|
VIRUS
NAME : VBS/Horty.c@MM
Virus
Characteristics
This threat is detected
as VBS/Horty@MM. The virus may arrive as an email attachment Monica-Bellucci.jpg.vbs
and will send an email using Outlook in the following format:
- Subject:
Here you have, ;o)
- Body: "Hi
(username).Check This!
- Attachment:
Monica-Bellucci.jpg.vbs
It then copies the following
infected files to the Windows Directory:
- Monica-Bellucci.jpg.vbs
- run32dll.vbs
VBS/Horty.c@MM also uses
an infection counter in : HKLM\SOFTWARE\TaskManager. If counter value
is less than 8, the virus emails out to all recipients in the Outlook Contact
folder in the above format. If the infection counter is equal to 10, the
virus deletes *.exe in windows folder and then displays a message.
Symptoms
A message displayed. Deletion of executables from the Windows
directory. The presence of the following files in the Windows directory:
- run32dll.vbs
- Monica-Bellucci.jpg.vbs
Method
Of Infection
Executing the file run32dll.vbs or Monica-Bellucci.jpg.vbs.
|
|
|
