Sophos

Troj/Glibma-A

Aliases
  • Virus.VBS.Small.g
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Drops more malware
Protection available since 17 May 2007 02:45:56 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Glibma-A is a Trojan for the Windows platform.

When Troj/Glibma-A is installed it creates the following files in the <Windows>\system folder:

cscript.exe
Hd.vbs
gm.BAT
gm.vbe

The file cscript.exe is a clean executable file, while the other files are all also detected as Troj/Glibma-A.

Troj/Glibma-A attempts to find and modify files with the following extensions:

ASP
HTML
HTM
PHP

Modified files are detected as Troj/Glibif-A and will attempt to run a script from a remote location.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer