Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically


This is a script virus written in Visual Basic Script. Upon executing an infected file it attacks all files with extensions VBS and vbs on current disk. In the subdirectory, /SYSTEM in the directory with installed operating system WINDOWS, the virus makes a copy of itself under the name W95inf32.vbs. The virus ensures that it will be activated again by means of creating a key in the system registry at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Beast
The virus does not attack files with the last character "#". This character serves to mark files that have already been infected and should prevent them from multiple infections
On the 13th say in a month the virus displays the following message:

After displaying it the author intended to switch the computer off, but because of an error in the code it will cause an error message.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.