This variant is created using Visual Basic, the same as preceding. Icon that is used like folders. When infected, he tried to send a message to each contact on the Yahoo! Messenger sent a message to the victim such as "Olalala, may tinh cua ban da nhiem Worm DungCoi", also with links that point to the site http://dungcoivb.googlepages.com. He can also make contact with the AutoUpdate site. If viewed from the message that he made, clearly it is not made in local virus.
Virus that was created using Visual Basic Script is sized about 9KB. He on the infected computer will make a lot of duplicate files in each folder that it found the file name autorun.inf, Thumb.db, in pro-hidden attributes, and a shortcut with the name Microsoft. If the shortcut is accessed, he will indeed go to a folder, but behind that the virus will also be active. File Thumb.db here also is not a file belonging to Windows, but unless the script file virus. At the infected computer will also found a virus in a message the user Temp directory. In this directory will also be found other files that the script virus that has been in decrypt. Because you need to know that this virus is present in most encryption.
Valeria.C. The virus is one of the local, again created using Visual Basic, and there seems to be a similarity with the virus Aksika, he could be a modified version of the virus Aksika. The virus is similar to disguise the folder icon, with a file size of 152KB without in-pack. At the infected computer, some files will be found that is similar to the folder when it is a virus. Known, the root of each drive, it will create a folder with the name valerianet files that contain viruses. To find out if the computer has been infected with this virus is not, quite easily. Computers infected by the name of the file there is valeria.txt in C: \.
Subscribe to:
Posts (Atom)
