Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

VBS/Claus.A

VBS/Claus.A is a script worm spreading as an email file attachment.  It is written in Visual Basic Script.  For its activity it requires Windows Scripting Host to be installed on the target computer.  The worm arrives in a message with the subject Santa Claus surprise.  In the body of the message the following text can be found: Would you like to see what's doing Santa Claus during his free time?  In the message attachment is the file S.Claus.vbs in which the worm code is located.  After activation the worm sends out messages with its copy in attachment. After that it displays a window announcing an error:

 

 

The worm tries to infect files with the extension .vbs on accessible network disks.  At the end of its activity it creates the file read.txt in the menu with programs. There is the following text in the file:

Your computer was successfully infected

Coding by Begbie, Slovakia

© 1992-2004 Eset s.r.o. All rights reserved. No part of this encyclopedia may be reproduced, transmitted or used in any other way in any other form or by any means without prior permission from Eset.