Sophos

Sophos blogs

W32/Vago-A

Aliases
  • BAT/Agent.eej
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Removable storage devices
  • Network shares
Affected operating systems Windows
Protection available since 4 November 2009 01:47:39 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

W32/Vago-A is a worm for the Windows platform.

W32/Vago-A attempts to copy files with filenames that match "gova*" and "auto*.inf" from the same folder as itself to the <Temp>\win\ folder, and also to a number of mapped network drives and devices.

W32/Vago-A attempts to delete all files in the <Temp>\tampa\ folder, as well as files on mapped drives with filenames that match "myeclass.*".

W32/Vago-A may attempt to run the files paygova.vbs, paygova.bat and gova.vbs.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer