3 ms·
It was a .vbs that the user has to run by clicking on it
by easytiger 6y ago
It was a .vbs that the user has to run by clicking on it
- jplayer01 6y agoYeah, thanks for the complete lack of technical detail? The link I gave adds stuff like When the worm is executed, it copies itself as the files LOVE-LETTER-FOR-YOU.TXT.VBS and MSKERNEL32.VBS in the Windows_system_folder and WIN32DLL.VBS in the Windows directory. It creates its own key named MSKernel32 under the Local machine registry key that causes programs to run and adds the value MSKERNEL32.VBS to it. It also creates a new Local Machine RunServices key named Win32DLL and adds WIN32DLL.VBS as a value to it, so it will run when the system boots, before the user even logs on. which is far more interesting than "a user is tricked into running a vbs script". And this is HN, that one liner is really not sufficient. edit: Why is this getting downvoted? He comments with a zero effort comment with zero useful information in response to my legitimate question and I get shit on. Typical HN. Fucking hate you stupid assholes.