VBS_RESULOWS.A

This Visual Basic (VB) Script may be dropped onto a system by another malware, or may be downloaded from the Internet by an unsuspecting user when visiting a malicious Web site.

Upon execution, it drops a copy of itself using the file name MS32DLL.DLL.VBS in the Windows folder. It then creates a certain registry entry so that it automatically executes at every system startup.

It attempts to drop copies of itself as MS32DLL.DLL.VBS in all available removal drives every 200 seconds. Furthermore, it attempts to create and execute the file AUTORUN.INF in the same drives.

Related Items