3 Replies Latest reply on Sep 3, 2013 7:13 PM by Hayton

    Virus "Mozilla.vbs"

    oaroca

      Goog afternoon,

       

      I need help on a virus called Moxilla.vbs, I have installed on the computers of the company Mcaffe Virus Scan enterprise, the virus moves into the USB memory creates shortcuts and hide files, file are listed attachment containing the virus code.

       

      Thank.


      Necesito ayuda sobre un virus llamado Moxilla.vbs, tengo instalado en los equipos de la empresa el Mcaffe Virus Scan enterprise, el virus se aloja en las memorias usb y que crea accesos directos ocultando los archivos, adjunto archvo que contiene el codigo del virus.

      Gracias.

       

      Message was edited by: Hayton. The name in the subject line was wrongly given. The uploaded malware script has been removed. on 04/09/13 01:12:37 IST
        • 1. Re: Virus Mozilla.exe
          Peter M

          Moved to Corporate Malware Discussion for better support.

           

          on 03/09/13 8:20:29 EDT PM
          • 2. Re: Virus Mozilla.exe
            bzielin

            You can protect yourself if you use access protection.

             

            Under the category Common Maximum Protection: check Prevent programs registering to autorun.

             

            on 03/09/13 8:20:50 EDT PM
            • 3. Re: Virus "Mozilla.vbs"
              Hayton

              The file you have attached to your post is malware and so it will be removed.

               

              Please submit the file to McAfee Labs for analysis - information how to do that is HERE.

               

              The vbs file is detected as malicious by 20 out of 47 vendors according to VirusTotal (report HERE).

               

              Microsoft detects it as Worm:VBS/Dunihu.U but has no technical information available for it.

               

              According to the VirusTotal analysis McAfee does not yet detect this. It is similar to one already known to McAfee, "VBS/Autorun.worm.aadd".

               

              Message was edited by: Hayton on 04/09/13 01:13:06 IST