|
Specific detection and disinfection for VBS/Monopoly.A is a component update to Command AntiVirus v. 4.57. Click here to update to Command AniVirus 4.57 if you have not already. Download the component update by clicking on the link(s) below for the products you are running. Name: VBS/Monopoly.A Aliases: Monopoly, Monopoly.worm Type: Worm
VBS/Monopoly.A is a VBScript encrypted worm that infects Windows 95/98/2000. The worm distributes itself as an e-mail attachment. The e-mail subject is listed as "Bill Gates Joke" The e-mail body contains the text "Bill Gates is guilty of
When this script attachment is run on a system that supports Windows Scripting host (installed by default in Windows 98/2000) and VBScript 5.x, the worm will drop the files MONOPOLY.JPG, MONOPOLY.WSH and MONOPOLY.VBE (which checks the registry for existing infection).
If there is no existing infection, it creates a registry key:
VBS/Monopoly.A then searches the Outlook 98/2000 address book, creates a list of recipients, (who are BCC-ed and do not appear in the "To" or "CC" fields), and mails itself to those recipients. Recipient system information is then e-mailed separately to four locations. Command AntiVirus detects and disinfects VBS/Monopoly.A. Click on the link on the top of this page to get the component update with specific detection and disinfection.
|