Published Sep 09, 2010|Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: WIN.WORM.Virus (Dr.Web) W32/VBMania@MM (McAfee) Worm:Win32/VB.WF (other) W32/Autorun-BHO (Sophos) "Here you have virus" (other)


Worm:Win32/Visal.B is a worm that spreads to other computers on a network from drives C: through H: and via email. When spreading through email, the message contains a link to the worm hosted on a remote server. The file icon resembles a PDF document to maximize the chance of execution. The worm attempts to download arbitrary files and create a full-access share on the local computer as "updates".


Latest news