high
Summary
Summary
Action- More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Characteristics |
|
| Protection available since | 8 May 2007 08:50:03 (GMT) |
| Last updated | 14 May 2007 22:01:20 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
More Information
VBS/Solow-G is a worm for the Windows platform.
VBS/Solow-G attempts to spread through removable storage devices.
When installed VBS/Solow-G copies itself to the <Windows>\maskrider2001.vbs. The following registry entry is created to run the file maskrider2001.vbs at startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
maskrider
<Windows>\maskrider2001.vbs
Every 200 seconds VBS/Solow-G enumerates available removable devices and attempts to copy itself to each with the filename maskrider2001.vbs. The worm also creates the file autorun.inf that contains instructions to autorun the copy of the worm once the infected drive is accessed.
|
