Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

VBS.Gormlez - New destructive VBS virus

http://www.symantec.com/avcenter/venc/data/vbs.gormlez@mm.html

VBS.Gormlez@mm is a mass-mailing worm that sends a copy of itself to all email addresses in the Windows Address Book and attempts to spread through file-sharing networks. The worm deletes files with a .dll, .vbs, .exe, or .wsh extension

EMAIL FORMAT:
Subject:        Re: Hello
Message      Body: Hey There :-)
Attachment: Hello.vbs


Message after infection:

Shutdown.vbs,  Version 1.00
VBS.G0mez Is here :-p
Usage:  CSCRIPT  SHUTDOWN.VBS  [ computer_name ]
!!!"!!!" SHUTDOWN! 
G0mez will now shutdown the computer!  :-)
hehehe