Toy.vbs

Recently I have encountered a LOW GRADE virus at work called "TOY.vbs" .
The most I have found on it is that it is transmitted thru Microsoft Word Normal.dot template and uses that template to spread. I have done several scans and searches and as of yet have not been able to delete this virus.
I have renamed the Normal.dot template and created a new one, then deleted the old one. The virus is not evident then shows up a few days later. wWe have scanned all the incoming emails as well. Any clue on the removal of this CRITTER?Thanks, S

 

Toy.vbs vs. TREND MICRO

I have used the TREND MICRO House Call Scan w/ no Luck.

 

Toy.vbs is W32Beagle, a mass mailer.

DO NOT TRY THIS AT HOME!!
For fun, I found it on the net and clicked on it. I got a "malicious script" warning from Norton, and the event logs said the "repair failed ". So I clicked on it again. Same warning, log said access denied. The third time, the response was identical to the first. Norton recognized it and stopped it. So, I saved it to my hard drive, and I'm going to fire it at the next person who sends me a forward from Flowgo, Debs fun pages or the like, or who sends an email friendship chain letter that promises to hurt everyone I love if I don't forward it on to at least 10 people in the next 20 seconds.

This thing is more of a nuisance than a problem, and Symantec has a removal tool for it. Check out the link above, and post back.

Johanna

 

Thanks

I had run a search on SYMANTEC and must have missed it. When i return to work I will RUN the W32BEAGLE removal Tool. You are of course right that it probaly came from Flowgoor Debs Fun Pages. Thanks again Johanna. S