0 members (),
526
guests, and
34
robots. |
Key:
Admin,
Global Mod,
Mod
|
S |
M |
T |
W |
T |
F |
S |
|
|
|
1
|
2
|
3
|
4
|
5
|
6
|
7
|
8
|
9
|
10
|
11
|
12
|
13
|
14
|
15
|
16
|
17
|
18
|
19
|
20
|
21
|
22
|
23
|
24
|
25
|
26
|
27
|
28
|
29
|
30
|
31
|
|
There are no members with birthdays on this day. |
#27917
Fri 04 May 2001 05:59:AM
|
Joined: Feb 2001
Posts: 3,536
Mission Commander
|
OP
Mission Commander
Joined: Feb 2001
Posts: 3,536 |
VBS/Helper.Worm<P>Helper is a new virus that also has worm<BR>capabilities, found in the wild in China.<BR>It spreads through the OutLook Express mail<BR>client and also infects files with extensions<BR>.HTM and .HTT on the system.<P>Once activated, the worm creates copies of<BR>itself as HELP.VBS, HELP.HTA, HELP.HTM, and<BR>UNTITLED.HTM under the Windows directory.<BR>It then registers UNTITLED.HTM as Stationary<BR>for Outlook Express by adding the following<BR>registry keys:<P>HKEY_CURRENT_USER\Identities\<default user id>\Software\Microsoft\Outlook<BR> Express\5.0\Mail\, "Message Send HTML"<BR>HKEY_CURRENT_USER\Identities\<default user id>\Software\Microsoft\Outlook<BR> Express\5.0\Mail\, "Compose Use Stationery"<BR>HKEY_CURRENT_USER\Identities\<default user id>\Software\Microsoft\Outlook<BR> Express\5.0\Mail\, "Stationery Name"<P>Any new mail composed after infection will<BR>have the virus embedded as Visual Basic<BR>Script in the message body.<P>HELP.HTM will be registered as wall paper<BR>by adding the following key:<P>HKEY_CURRENT_USER\Control Panel\desktop\wallPaper<P>It will run help.htm if the active desktop<BR>is enabled.<P>As a virus, it appends itself to host<BR>files, increasing their size by 9,900 bytes.
|
|
CMS The Best Conveyancing solicitors conveyancing quotes throughout the UK
For any webhosting enquiries please email webmaster@aus-city.com
|
Entire Thread
|
VBS/Helper.Worm
|
VA3DBJ
|
Fri 04 May 2001 05:59:AM
|
Forums60
Topics687,449
Posts722,060
Members2,957
|
Most Online3,142 Jan 16th, 2023
|
|
|