Remove VBS.Mutafrog!inf
Posted on: June 18th, 2009
| Discovered: | June 15, 2009 |
| Updated: |
June 15, 2009 8:17:29 AM |
| Type: |
Virus |
| Systems Affected: |
Windows XP, Windows Vista, Windows Server 2003, Windows 2000 |
| Recommended Action: | |
 In order to Remove VBS.Mutafrog!inf you need to Download the ‘No Adware’ remover software. Based on our testing this was the best peforming remover of VBS.Mutafrog!inf .. |
|
| Technical Details: |
| When executed, the virus creates one of the following files:
* %Windir%\MsSvrdll.vbs * %System%\MsSvrdll.vbs Note: The above files are detected as Bloodhound.VBS.4. It then creates one of the following registry entries so that the dropped file executes whenever Windows starts: * HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\RunOnce\”a” = “%Windir%\MsSvrdll.vbs” * HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\RunOnce\”a” = “%System%\MsSvrdll.vbs” It then executes the following files, if present: * %System%\svch0st.exe * %Windir%\system\dllhost.com The virus then creates the following file on fixed and removable drives, which is also detected as Bloodhound.VBS.4: %DriveLetter%\READ ME.TXT.vbs It also searches fixed and removable drives for files with the following extensions, which it then infects: * .asp * .html * .htm * .php |
| Action Steps: |
| FREE SCAN: NoAdware can Remove VBS.Mutafrog!inf. Click the link below for your free download & scan your PC now.
Please click here for manual removal instructions. |
