Bat/LoseSlp-A is a multi-component BAT script which spreads by copying itself to removable devices as the files win.bat and win.vbe.
Bat/LoseSlp-A creates the following files:
<Windows>\inf.tem - detected as Bat/LoseSlp-A
<Windows>\sleep.vbe - detected as Bat/LoseSlp-A
<Windows>\uishere-1.txt - innocuous file
<Windows>\win.bat - detected as Bat/LoseSlp-A
<Windows>\win.vbe - detected as Bat/LoseSlp-A
C:\autorun.inf - detected as Bat/LoseSlp-A
C:\win.bat - detected as Bat/LoseSlp-A
C:\win.vbe - detected as Bat/LoseSlp-A
Bat/LoseSlp-A creates the following registry entry to run itself on system restart:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
vbe
<Windows>\win.vbe