McAfee > Theat Center > Virus Detail Page

Overview

This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.

Characteristics

VBS/Vags.kit is a virus construction kit. The filename is antigam.exe (name might vary). The filesize is 106496 bytes. The virus contruction kit is detected generically with for example current Dat-4292 as W32/Generic.worm!irc virus.

The virus construction kit generates .vbs files, these are detected generically with for example current Dat-4292 as VBS/VBSWG.gen@MM virus.

Symptoms

-Presence of a file called antigam.exe (name might vary). The filesize is 106496 bytes.

-Virusscan triggers on files with VBS/VBSWG.gen@MM virus.

Method of Infection

Manually running the virus contruction kit generates .vbs virus files, executing these starts the infection routine.

Removal

All Users:
Use current engine and DAT files for detection and removal.

Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning with the recommended engine and DAT combination (or higher).

Additional Windows ME/XP removal considerations

Variants

Variants

N/A

All Information

Overview -

This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.

Characteristics

Characteristics -

VBS/Vags.kit is a virus construction kit. The filename is antigam.exe (name might vary). The filesize is 106496 bytes. The virus contruction kit is detected generically with for example current Dat-4292 as W32/Generic.worm!irc virus.

The virus construction kit generates .vbs files, these are detected generically with for example current Dat-4292 as VBS/VBSWG.gen@MM virus.

Symptoms

Symptoms -

-Presence of a file called antigam.exe (name might vary). The filesize is 106496 bytes.

-Virusscan triggers on files with VBS/VBSWG.gen@MM virus.

Method of Infection

Method of Infection -

Manually running the virus contruction kit generates .vbs virus files, executing these starts the infection routine.

Removal -

Removal -

All Users:
Use current engine and DAT files for detection and removal.

Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning with the recommended engine and DAT combination (or higher).

Additional Windows ME/XP removal considerations

Variants

Variants -

N/A