high
Summary
Summary
Action- More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Characteristics |
|
| Protection available since | 12 November 2007 20:00:57 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
More Information
Bat/LoseSlp-A is a multi-component BAT script which spreads by copying itself to removable devices as the files win.bat and win.vbe.
Bat/LoseSlp-A creates the following files:
<Windows>\inf.tem - detected as Bat/LoseSlp-A
<Windows>\sleep.vbe - detected as Bat/LoseSlp-A
<Windows>\uishere-1.txt - innocuous file
<Windows>\win.bat - detected as Bat/LoseSlp-A
<Windows>\win.vbe - detected as Bat/LoseSlp-A
C:\autorun.inf - detected as Bat/LoseSlp-A
C:\win.bat - detected as Bat/LoseSlp-A
C:\win.vbe - detected as Bat/LoseSlp-A
Bat/LoseSlp-A creates the following registry entry to run itself on system restart:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
vbe
<Windows>\win.vbe
|
