W32/VB-CAI is a P2P worm for the Windows platform.
When first run W32/VB-CAI copies itself into <Windows>\config_.com and various
file sharing folders under different names like for example
\My Music\My Music.exe
\My Shared Folder\My Shared Folder.exe
<Program Files>\KaZaA\KaZaA.exe
<Program> Files>\Kmd\Kmd.exe
<Program Files>\Limewire\Limewire.exe
and creates the file \Autorun.inf. This file can be deleted.
W32/VB-CAI also copies itself to the startup folder, creating an entry under
<Startup>\startupFolder.com.
The following registry entry is created to run config_.com on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Explorer
<Windows>\config_.com