VBS/Shush-A

Category: Viruses and Spyware Protection available since:17 Aug 2011 18:32:32 (GMT)
Type: Visual Basic Script worm Last Updated:17 Aug 2011 18:32:32 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

VBS/Shush-A is a VBS worm for the Windows platform.

VBS/Shush-A attempts to copy itself to connected drives with the name main.vbs, as well as dropping a file autorun.inf (also detected as VBS/Shush-A) to run itself automatically. If the file <System>\autorun.exe exists, it will copy it as well.

VBS/Shush-A copies itself to <System>\main.vbe and <System>\main.txt, dropping the file autorun.inf to the current and Windows system folders too.

VBS/Shush-A sets the following registry entry to run itself on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
explorer
main.vbe

download Try Sophos products for free
Download now