Selected viruses, spyware, and other threats: sorted alphabetically
VBS/Luser.A |
The first encrypted virus written in VBScript. When it is run it creates file "Winstart.vbs” in the Windows system directory. To do so it uses function with name “A” to decode encrypted strings in its body. Then it creates a record in registers for the purpose of automatic execution of the created file at the Windows start up. Upon its activation function with name “B” is utilized to decode other needed parts. After activation the virus searches through a random directory with subdirectories and tries to find files with extensions HTML or HTM. If it finds them it infects them and encodes itself with help of another function with name “W”. On the first day in a month it displays a Spanish text.
© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.
