WORM_VB.GOZ

This worm may arrive bundled with other malware as a malware component. It may also be downloaded unknowingly by a user when visiting malicious Web sites.

Upon execution, this worm displays an error message to trick the user that the executed file is damaged. It then drops a copy of itself and creates a registry entry to enable its automatic execution at every system startup.

This worm hides every folder in the root folder of both physical and removable devices of the affected system. It then drops a copy of itself using the folder names as the file names of its dropped copies. It also uses the folder icon to fool the user into thinking that it is a non-malicious file.

Related Items