WORM_VB.GCZ

This worm may arrive via network shares. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It drops copies of itself.

This worm creates registry entries to enable its automatic execution at every system startup. It employs registry shell spawning so that it executes when files of certain types are run. It does this by creating a registry entry.

It drops an AUTORUN.INF file to automatically execute its dropped copies when infected drives are accessed.

Related Items