Classification

Category: Malware

Type: Worm

Aliases: Hard, HardHead, VBS/Hard.A@MM

Summary


Hard is a Visual Basic Script mass mailer (worm) that tries to disguise a virus warning.

Removal


Automatic action

Based on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the detected program or file, or ask you for a desired action.

Knowledge Base

Find the latest advice in our Community Knowledge Base.

About the product

See the manual for your F-Secure product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details



Variant:Hard.A

Hard.A worm spreads to all resipients listed in Outlook Express address book. It arrives in a message that looks as follows:

----- Original Message -----
 From: warning@symantec.com
 To: supervisor@av.net; security@softtools.com;
 mark_fyston@storess.net; directorcut@ufp.com;
 pjeterov@goldenhit.org; kim_di_yung@freeland.ch;
 james.heart@macrosoft.com
 Subject: FW: Symantec Anti-Virus Warning
 Hello,
 There is a new worm on the Net.
 This worm is very fast-spreading and very dangerous!
 Symantec has first noticed it on April 04, 2001.
 The attached file is a description of the worm and how it
 replicates itself.
 With regards,
 F. Jones
 Symantec senior developer
 Attachment: www.symantec.com.vbs

Hard.A contaians a payload that activates on November 24. Then the worm shows a message box with the following title and text:

	Some shocking news 	Don't look surprised! 	It is only a warning about your stupidity
	Take care!