VBS.Braco.F
Alias: VBS/Braco@MM (McAfee),
VBS/Finder.Worm
Category: VB Script
Type: Worm
Published Date: 2/11/2004
Last Modified: 2/11/2004
CHARACTERISTICS
VBS.Braco.F is a worm that spreads through e-mail. It uses Microsoft's CDO for NTS library, and therefore will usually only function on servers with IIS installed.
Method of Installation
When executed, VBS.Braco.F copies itself to the following locations:
%System%\Finder.vbs
%System%\Mail.vbs
%System%\Killer.vbs
%Windows%\Link.vbs
%Windows%\Cobra.vbs
%Temp%\Setup.vbs
It also copies itself to the temporary folder using a randomly generated name consisting of 1 to 15 characters followed by .vbs, for example:
%Temp%\mpmq.vbs
%Temp%\g8o17ufx9bnn4.vbs
These are the files attached to outgoing e-mails.
MORE:
http://www3.ca.com/virusinfo/virus.aspx?ID=38259

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic