WORM_VB.CKH

This memory-resident worm arrives on a system as a file downloaded from the Internet by unsuspecting users. When executed, it drops several copies of itself on the affected system.

It propagates by dropping a copy of itself as TEL.XLS.EXE into the root folder of all the physical drives and removable drives of the affected system. It also drops the file AUTORUN.INF in the same folder to enable its automatic execution whenever a user accesses the physical and removable drives.

Related Items