Network Associates, Inc.x
Latest Virus Alerts AVERT Tools TVD Beta Area Send us a file you think is infected (this mailbox not for technical support - see Knowledge Base for support)
Online Knowledge Base Search the Virus Info Library Virus Definition Updates
Back to A.V.E.R.T. Home Page

How to Compose a Virus Sample
How to Repair Word Macro Virus Damages
MS Alert: Two Office Security Issues and Outlook Archive Problem


This virus is a true parasitic infector. It appends itself to then end of any script files in either ; The same folder as the virus The root directory Windows\Desktop Windows\Start Menu\Programs\Startup Windows\My Documents

It also creates a copy of itself in the Windows folder called avm.vbs and inserts an entry in the registry so that this is run automatically at startup. This virus has no payload, is easily repairable, but could be quite dangerous due to it's installing itself into the registry. It is dropped by the W97M/ColdApe virus.

© 1998, Network Associates, Inc. and its affiliated Companies. All Rights Reserved.