VBS_DUNIHI.SMX

 Analysis by: Sabrina Lei Sioting

 PLATFORM:

Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 INFORMATION EXPOSURE:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted: No

  • In the wild: Yes

  OVERVIEW


This Trojan may be dropped by other malware.

This is the Trend Micro detection for files that exhibit certain behaviors.

  TECHNICAL DETAILS

File Size:

Varies

File Type:

LNK

Memory Resident:

No

Initial Samples Received Date:

05 Mar 2014

Arrival Details

This Trojan may be dropped by other malware.

Other Details

This is the Trend Micro detection for:

  • This is a detection for shortcut files dropped by DUNIHI worms. This .LNK files point to the copy of DUNIHI worms in removable drives. These dropped .LNK files use the names of the folders and files located on the said drives for their file names. It then sets the attributes of the original folders to System and Hidden to trick the user into clicking the .LNK files.