This variant is created using Visual Basic, the same as preceding. Icon that is used like folders. When infected, he tried to send a message to each contact on the Yahoo! Messenger sent a message to the victim such as "Olalala, may tinh cua ban da nhiem Worm DungCoi", also with links that point to the site http://dungcoivb.googlepages.com. He can also make contact with the AutoUpdate site. If viewed from the message that he made, clearly it is not made in local virus.
Virus that was created using Visual Basic Script is sized about 9KB. He on the infected computer will make a lot of duplicate files in each folder that it found the file name autorun.inf, Thumb.db, in pro-hidden attributes, and a shortcut with the name Microsoft. If the shortcut is accessed, he will indeed go to a folder, but behind that the virus will also be active. File Thumb.db here also is not a file belonging to Windows, but unless the script file virus. At the infected computer will also found a virus in a message the user Temp directory. In this directory will also be found other files that the script virus that has been in decrypt. Because you need to know that this virus is present in most encryption.
Subscribe to:
Posts (Atom)
