VBS/Anur.A

When executed, VBS/Anur.A creates a copy of itself at %System%\killVBS.vbs. To automatically run itself during system startup, the worm modifies this registry entry from:. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Software news by unknown