high
Summary
Summary
Action- More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Protection available since | 17 March 2009 07:23:48 (GMT) |
| Last updated | 18 November 2009 21:32:22 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for disinfecting PE executables.
More Information
W32/Scribble-B is a family of polymorphic viruses for the Windows platform.
Members of W32/Scribble-B allow a remote attacker to gain access and control over the infected computer through IRC channels.
Members of W32/Scribble-B infect files with the EXE and SCR extensions when they are opened or run.
Members of W32/Scribble-B inject a malicious iframe into files whose extensions start with HTM, PHP or ASP, with affected files detected as Troj/Fujif-Gen. At the time of writing the iframe points to a site that hosts more malware.
Members of W32/Scribble-B also add a line to the Windows HOSTS file to redirect the infected computer to an infected website.
|
