Solved


Name: Solved
Aliases: VBS.Solved, VBS/Cuartel-A, Cuartel,
Ports:
Files: NAV.exe [74 spaces] .vbs - 3,981 bytes
Created: 2001
Requires:
Actions: Worm / Destructive trojan / Mailbomber / Virus
It overwrites files and sends 1000 mail messages to two addresses in Argentina. The worm alters Internet Explorer´s start page. It will delete all files ending with .doc, .xls and .mdb, and turns off any proxy server. Infects all following files with itself: .btr, .pst, .xls, .mdb, .jpg, .pab, .wab and .dbx. If Solved is deleted it can recreate itself.
Versions:
Registers: HKEY_CURRENT_USER\Software\Microsoft\ Internet Explorer\Main\StartPage\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Notes: Works on Windows, together with MS Outlook and MS Internet Explorer.
Country:
Program: Written in Visual Basic Script (VBS).

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>