VBS.Fireburn - CuteJany_BigTits!.GIF.vbs

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: VBS.Fireburn

Sender:

Varies.

Subject:

Moin, alles klar? (if German version of Windows, otherwise)
Hi, how are you?

Message:

Hi, wie geht's dir? Guck dir mal das Photo im Anhang an, ist echt geil
;) bye,bis dann. (if German)
Hi, look at that nice Pic attached ! Watching it is a must ;) cu
later...

Attachment:

Aguiliera__NUDE!!.JPG.vbs
Christina__NUDE!!!.JPG.vbs
cute__EmmaPeel!!!.JPG.vbs
CuteJany__BigTits!.GIF.vbs
!Jany__Gets-fucked!.GIF.vbs
Julie17__xxx.GIF.vbs
MyGirlfriend__NUDE!.JPG.vbs
Ultra-Hardcore-Bondage.JPG.vbs

Comments: A worm that uses Outlook and mIRC to email itself to alladdresses in the Microsoft Outlook Address Book.

Symptoms:


 Drops the file "Rundll32.VBS" in the Windows directory. 
 If mIRC is installed, the worm drops the file "Script.INI" in the
mIRC program folder. 
 Modifies the following registry keys so that they say:
HKLMSoftwareMicrosoftWindowsCurrentVersionRunMSrundll32 =
"rundll32.vbs"
HKLMSoftwareMicrosoftWindowsCurrentVersionRegisteredOwner = "FireburN"

 On June 20th, the virus disables the mouse and keyboard.

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: If applicable, restore the Script.ini file from backup; otherwise, delete this file. Deleteall detected files. Remove the following entries in the registry:HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MSrundll32 = "rundll32.vbs"