Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Threats » VBS/Dismissed.B@mm

Overview

Threat Risk LOW LOW
Destructivity HIGH HIGH
Payload Same as VBS/Dismissed.A + large scale e-mailing.
Detection files published 18 Dec 2001 03:00:00
Description created 20 Dec 2001 04:16:00
Description updated 20 Dec 2001 04:28:00
Malware type WORM
Alias
Spreading mechanism EMAIL
FILE_INFECTION
IRC
NETWORK
UNKNOWN
Summary None

VBS/Dismissed.B@mm

Spreading

The Dismissed.B script variant is similar to the A variant, but has additional code to write out and run a VBScript worm in a file called outlook.vbs, which will be located on the Windows directory. This worm sends a reference to the infectious web page out via mail to entries in your "contacts" list. The Subject of this mail will be "Very important !!!", and the body text will be "See this page" + infectious URL.


Payload Details

n/a

Analysis

n/a

Removal

Most viral files will be deleted by Lumension's antivirus products. Some ASP, HTM and HTML files may need manual editing, and some files (the ones that the worm has deleted) must be replaced from backup or original media.


Last Updated: 12 Nov 2015 11:06:14