Need help? Ask the community or hire an expert.
Go to Avira Answers
Virus:VBS/Autorun.AL
Date discovered:27/12/2007
Type:Worm
In the wild:No
Reported Infections:Low
Distribution Potential:Low
Damage Potential:Low
Static file:No
File size:~ 10.000 Bytes
IVDF version:7.00.01.159 - Thursday, December 27, 2007

 General Method of propagation:
   • No own spreading routine


Aliases:
   •  Mcafee: W32/Autorun.worm.al virus
   •  Kaspersky: Trojan.VBS.Agent.bt
   •  F-Secure: Trojan.VBS.Agent.bt
   •  Sophos: VBS/Autorun-AO
   •  Bitdefender: VBS.Worm.Runauto.D


Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003


Side effects:
   • Drops a file

 Files It copies itself to the following locations:
   • %WINDIR%\.vbe
   • %SYSDIR%\.vbe



The following file is created:

%malware execution directory%\012.vbs This is a non malicious text file with the following content:
   • createobject("wscript.shell").run ".vbe"
Furthermore it gets executed after it was fully created.

Description inserted by Alexander Neth on Thursday, June 12, 2008
Description updated by Alexander Neth on Friday, June 20, 2008

Back . . . .