This Visual Basic script (VBScript) may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

This VBScript drops a file. It then executes a Windows component. This VBScript modifies a registry entry to enable its automatic execution at every system startup. It also deletes a registry key.

This malicious VBScript copies a file into various system folders. It then sets the Internet Explorer home page and window title to blank by creating registry entries.

It drops copies of itself in all physical and removable drives. It also drops an AUTORUN.INF file to automatically execute its dropped copies when the said drives are accessed.



More...