Re: VBS_REDLOF.A

Programs such as Wormguard (http://wormguard.diamondcs.com.au) will easily generically block the execution of such worms, but seeing as most VBS scripts are 'static' text files, if you have one sample of a VBS worm then you can usually just look at it in notepad, find a string that is fairly unique (essentially a signature), and then just use the Find utility in Explorer to search for all files containing that string. This trick should work on most VBS scripts  

• Original Message ----- From: "NR" <nr6106@hotmail.com> To: <focus-virus@securityfocus.com> Sent: Sunday, July 13, 2003 6:19 PM Subject: VBS_REDLOF.A

>
>
>
> Hi everybody,