Virus.VBS.Jertva

Technical Details

This virus infects htm, html and asp files. It is 1,531 bytes in size. It is written in Visual Basic Script (VBS).

Payload

When launching, the virus will check to see if it has been launched from a local resource. If the virus has been launched from a local resource, it will check for files with the extensions listed below in its working directory:

*.htm 
*.html
*.asp

It writes the following string to the start of all files found:

It then appends its body to the end of the file.

Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

1. Delete the original virus file (the location will depend on how the program originally penetrated the victim machine).
2. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).