Technorati
Digg
Delicious
Reddit
StumbleUpon
Facebook
Yahoo
Twitter
Faves
Newsvine
- Discovered:
- February 16, 2002
- Updated:
- February 13, 2007 11:47:22 AM
- Type:
- Trojan Horse
VBS.Xxx is a script Trojan that looks for the presence of the following folders:
- C:\Mirc
- C:\Mirc32
- C:\Programs\Mirc
- C:\Programs Files\Mirc
- C:\Programs Files\Mirc32
If it finds one of these folders, it searches that folder's \Download subfolder for the file xxxpasswords.html and copies that file to C:\Aadride.exe. If it does not find any of these folders, it copies the Autoexec.bat file to the file C:\Adride.exe.
Finally, the Trojan runs C\Adride.exe.
Antivirus Protection Dates
- Initial Rapid Release version February 19, 2002
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version February 19, 2002
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date February 19, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Douglas Knowles
