VBS/Nedal.A Virus

 Information about the VBS/Nedal.A virus:

VBS/Nedal.A is a Visual Basic Script worm. It will infect Windows systems.

The virus arrives with the following subject :

Osama Bin Laden Comes Back!

Content of the mail will be:

Hello People,

You have received Email from Osama Bin Laden.
Allah is The One Of God. No god in the World Accept Allah!
All people in the world love peace and no wars.
America and Israel must be destroy to prevent
from wars.

Your Sincerely,
Osama Bin Laden
Al-Qaeda Network

Body of the email contains script and binary contents, when the script is run a file by name OsamaLaden.vbs will be dropped under Windows directory. The worm may drop some trojans osama.exe, laden.exe and alta.exe under Windows folder. It alters the Windows registry at the following location;

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Later on, it displays an error message as:

You need ActiveX enabled if you want to see this e-mail. Please open this message again and click accept ActiveX Microsoft Outlook

This virus first appeared on 11th September 2002.

 Other names of VBS/Nedal.A worm:

This worm is also known as VBS/NEDAL-A, VBS_NEDAL.A