high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for disinfecting macro viruses.
More Information
VBS/Potok-A is an email-aware worm which uses Microsoft Outlook to spread itself.
The worm sends an email to the first 50 addresses in the Outlook address book with the following characteristics:
Subject line: "New Generation of drivers."
Message body: "Microsoft has published new driver for all types Video Cards, compatible with Windows 95/98/NT/2000/XP. You can read about it in attachment document. Best wishes, Microsoft."
Attached filename: "\driver.doc***.vbs"
(where *** represents 46 spaces)
Note: this file name has 46 spaces before its final .vbs extension in an attempt to fool users into thinking it is a Word document.
On a Windows NT machine using the NTFS filing system, the virus will hide part of its code in the Alternate Data Streams associated with the file ODBC.INI in the Windows subdirectory.
|
