html.redlof.a

[kenchiro75]

**Hidden Content: Check the thread to see hidden data.**

[mushachi71]

ขอโทดคับช่วยอธิบายให้หน่อยคับ มันคืออะไรทำงานอย่างไร ผมไม่รู้จักอะคับ :(

[kenchiro75]

HTML.Redlof.A is a polymorphic, encrypted, Visual Basic Script virus that

infects .html, .htm, .asp, .php, .jsp, and .vbs files on all drives.

Depending on the location of the Windows System folder, the virus copies

itself to either %windir%\System\Kernel.dll or %windir%\System\Kernel32.dll.

It changes the default association for .dll files.

Also Known As: VBS/Redlof@M [McAfee], VBS.Redlof [AVP], VBS_REDLOF.A

[Trend], VBS/Redlof-A [Sophos]

Type: Virus

Systems Affected: Windows 3.x, Windows 95, Windows 98, Windows NT, Windows

2000, Windows XP, Windows Me
Systems Not Affected: UNIX, Linux

this old virus