發表於 : 週四 8月 02, 2001 2:36 am
這是我去找ㄉVBS_HAPTIME.A
風險指數:
病毒種類: VBScript
具破壞性: Y
別名:
VBS_HAPTIME.A, Happy Time, VBS/Helper, HAPTIME.A
說明:
This Visual Basic Script (VBS) Trojan propagates via MS Outlook as an attachment called UNTITLED.HTM. It changes an infected user's active wallpaper. It carries two payloads: deleting .EXE and .DLL files and sending or forwarding emails to all addresses listed in an infected user's address book. It executes its payloads when the month number plus the day equals 13, and after the Trojan is activated 366 times.
解決方案:
Trend Micro considers this virus to be a very low risk and detection will be available in the next official pattern release, which is made available weekly, on Tuesday. This virus is listed here to keep our customers informed about on-going virus research. A bandage pattern file is available on request from virus_doctor@trendmicro.com.
Manual removal instructions:
Remove the registry key: HKEY_CURRENT_USER SOFTWAREHelp and the registry entries under HKEY_CURRENT_USERControl Panel desktopwallpaper
Scan your system and delete all files detected as VBS_HAPTIME.A. To do this Trend customers must download the latest pattern file and scan their system. Other email users may use Trend HouseCall, a free online virus scanner.
風險指數:
病毒種類: VBScript
具破壞性: Y
別名:
VBS_HAPTIME.A, Happy Time, VBS/Helper, HAPTIME.A
說明:
This Visual Basic Script (VBS) Trojan propagates via MS Outlook as an attachment called UNTITLED.HTM. It changes an infected user's active wallpaper. It carries two payloads: deleting .EXE and .DLL files and sending or forwarding emails to all addresses listed in an infected user's address book. It executes its payloads when the month number plus the day equals 13, and after the Trojan is activated 366 times.
解決方案:
Trend Micro considers this virus to be a very low risk and detection will be available in the next official pattern release, which is made available weekly, on Tuesday. This virus is listed here to keep our customers informed about on-going virus research. A bandage pattern file is available on request from virus_doctor@trendmicro.com.
Manual removal instructions:
Remove the registry key: HKEY_CURRENT_USER SOFTWAREHelp and the registry entries under HKEY_CURRENT_USERControl Panel desktopwallpaper
Scan your system and delete all files detected as VBS_HAPTIME.A. To do this Trend customers must download the latest pattern file and scan their system. Other email users may use Trend HouseCall, a free online virus scanner.
