F-Secure Virus Descriptions : VBS/Lucky

NAME:	VBS/Lucky
ALIAS:	Lucky2000

Lucky is written in Visual Basic Script language. We have not seen a working variant of this virus.

Lucky was made to overwrite all VBS files in the current directory. Depending on a random number it might display a message with a title:

    VBS.Lucky2000

and text:

    That is ou End....

Lucky tries to make a connection to the virus writer's web page by creating and running a link "Lucky2000.URL" into "C:\WINDOWS\Favorites\" directory.

[Analysis: Katrin Tocheva, F-Secure]