Hard is a Visual Basic Script mass mailer (worm) that tries to disguise a virus warning.
Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.
Hard.A worm spreads to all resipients listed in Outlook Express address book. It arrives in a message that looks as follows:
----- Original Message ----- From: email@example.com To: firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org; email@example.com; firstname.lastname@example.org Subject: FW: Symantec Anti-Virus Warning Hello, There is a new worm on the Net. This worm is very fast-spreading and very dangerous! Symantec has first noticed it on April 04, 2001. The attached file is a description of the worm and how it replicates itself. With regards, F. Jones Symantec senior developer Attachment: www.symantec.com.vbs
Hard.A contaians a payload that activates on November 24. Then the worm shows a message box with the following title and text:
Some shocking news Don't look surprised! It is only a warning about your stupidity Take care!
Date Created: -
Date Last Modified: -