February 16, 2002
February 13, 2007 11:47:22 AM
Trojan Horse

VBS.Xxx is a script Trojan that looks for the presence of the following folders:
  • C:\Mirc
  • C:\Mirc32
  • C:\Programs\Mirc
  • C:\Programs Files\Mirc
  • C:\Programs Files\Mirc32

If it finds one of these folders, it searches that folder's \Download subfolder for the file xxxpasswords.html and copies that file to C:\Aadride.exe. If it does not find any of these folders, it copies the Autoexec.bat file to the file C:\Adride.exe.

Finally, the Trojan runs C\Adride.exe.

Antivirus Protection Dates

  • Initial Rapid Release version February 19, 2002
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version February 19, 2002
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date February 19, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Douglas Knowles
Summary| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube