- Discovered:
- September 30, 2003
- Updated:
- February 13, 2007 12:08:17 PM
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
VBS.Biscuit.B is a variant of VBS.Biscuit.A@mm, which can spread by network shares.
The worm attempts to copy itself to both the local host and reachable remote network shares. It will copy itself to the root of the network share as Netlog.vbs.
The worm will also copy the original worm's filename to the following folders, if it is able to copy Netlog.vbs to the root of the share:
- <network share root>\Windows\Menu Avvio\Programmi\Esecuzione automatica
- <network share root>\Windows\startm~1\programs\startup
- <network share root>\Windows
- <network share root>\Windows\start menu\programs\startup
- <network share root>\Win95\start menu\programs\startup\
Antivirus Protection Dates
- Initial Rapid Release version October 1, 2003
- Latest Rapid Release version February 19, 2011 revision 020
- Initial Daily Certified version October 1, 2003
- Latest Daily Certified version February 20, 2011 revision 002
- Initial Weekly Certified release date October 1, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Kevin Ha



