Threat Database Worms Win32/VBDoc


By Domesticus in Worms

Threat Scorecard

Ranking: 8,337
Threat Level: 10 % (Normal)
Infected Computers: 806
First Seen: May 29, 2013
Last Seen: September 15, 2023
OS(es) Affected: Windows

Win32/VBDoc is a worm, which is written using Visual Basic and use complicated encryption engine that decrypts a code of a worm into memory block and runs it. The Visual Basic code is only a decryption engine, because of that it can be very unstable and hard to distinguish between the worm and common Visual Basic programs. Such polymorphic malware infections as Win32/VBDoc always has some week points used by anti-virus programs in order to recognize it. In turn, the creators of the malware infection aim to bypass such week points. Win32/VBDoc replicates itself in some folders and documents on the affected PC. Win32/VBDoc disguises the original file so that the victim sees a folder instead it and clicks it.


Most Viewed