VBS/Ablank.A@mm

Download VIRUSfighter NOW
VBS/Ablank.A@mm Destructivity: Spreading: Overall risk:
  
• Detected by virus detection files published: 11/15/2001 • Type: Worm
• Virus characteristics first published: 11/15/2001 • Spreading mechanism: Email
• Virus characteristics latest update: 12/17/2003 • Overall risk: Low
• Alias: I-Worm.Ablank • Payload: Formats D: drive
• Infection type: Microsoft Visual Basic Script  

Virus type Spreading
mechanism 		Destructivity
and payload 		Additional
descriptions 		Detection
and removal
Email characteristics:
  • Subject: Hi!
  • Body: It's my new programm! Look on this!

  • Attachment: best.vbs
The worm copies itself to the Windows system folder as rundll.vbs, and to the Windows folder as best.vbs. It will also create a new about-blank.htm in the Windows directory and set the Internet Explorer start page to point to this. This has the effect that the worm's emailing routine is run every time that Internet Explorer is run. Emails containing the worm are sent to the 50 first in the Outlook Address book.



It sets the registry key
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\rundll to \rundll.vbs

so that it is loaded from startup.
# - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z
To protect and serve, VirusFighter