The Web    Google
1/10: VBS/Mcon-G Worm Spreads Via IRC

1/10: VBS/Mcon-G Worm Spreads Via IRC
January 10, 2005

VBS/Mcon-G is a worm that spreads via network shares and IRC channels. When first run the worm copies itself as ttfload.vbs to all folders whose name contains the text string "startup" (without regard for case) and to the Windows fonts folder.

The worm then launches ttfload.vbs from the Windows fonts folder, displays a message box with the text "ERROR", "INVALID FILE FORMAT" and finally deletes itself.

More information can be found at Sophos page.

  • The Sober Virus Returns
  • Report Raps Cisco's Security
  • 4/8: Cabir-J Worm Affects Symbian Phones
  • 3/7: Forbot-EP Worm Targets Remote Shares
  • 4/11: Mytob-AG Sends Copy of Itself
  • Buffer Overflows Patched in RealPlayer
  • AOL Offers Top 10 Spam List to Aid in Battle
  • 2/7: Traxg-C is a Mass-Mailing Worm
  • 'Land' Bug Back to Bedevil Microsoft Servers
  • 4/15: Sdbot-XC Worm Targets Passwords
  • OpenVMS: An Old OS Hasn't Lost Security Footing
  • Compare Security Camera Products