VBS.Fireburn.A

This .VBS worm uses Outlook and mIRC to propagate. It drops the rundll32.vbs file in the Windows folder. If mIRC is installed, it drops the Script.ini file in the mIRC program directory. On June 20th, the worm displays a message and disables the mouse and the keyboard.

Protection

• Initial Rapid Release version May 30, 2000
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version May 30, 2000
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low