VIRUS NAME : VBS/Horty.c@MM
Virus Characteristics
This threat is detected as VBS/Horty@MM. The virus may arrive as an email attachment Monica-Bellucci.jpg.vbs and will send an email using Outlook in the following format:
Subject: Here you have, ;o)
Body: "Hi (username).Check This!
Attachment: Monica-Bellucci.jpg.vbs
It then copies the following infected files to the Windows Directory:
Monica-Bellucci.jpg.vbs
run32dll.vbs
VBS/Horty.c@MM also uses an infection counter in : HKLM\SOFTWARE\TaskManager. If counter value is less than 8, the virus emails out to all recipients in the Outlook Contact folder in the above format. If the infection counter is equal to 10, the virus deletes *.exe in windows folder and then displays a message.
Symptoms
A message displayed. Deletion of executables from the Windows directory. The presence of the following files in the Windows directory:
run32dll.vbs
Monica-Bellucci.jpg.vbs
Method Of Infection
Executing the file run32dll.vbs or Monica-Bellucci.jpg.vbs.
|
