Home Malware Programs Trojans VBS.Mailcab

VBS.Mailcab

Posted: April 6, 2012

Threat Metric

Ranking: 2,210
Threat Level: 2/10
Infected PCs: 61,586
First Seen: April 6, 2012
Last Seen: October 16, 2023
OS(es) Affected: Windows

VBS.Mailcab is a Trojan and VBS script generated by XM.Mailcab@mm. VBS.Mailcab comes as a .vbs file packaged within a .cab file that is found as XM.Mailcab@mm. When installed, VBS.Mailcab adds a malicious file. Once the .vbs file is executed, it extracts the Excel file with the same name and opens it. If the .vbs file cannot find the Excel file, it shows a dialog box with the following text:

Warning!
You are going to open a confidential file.
Please input the complete file path.
ex. C:\path\confidential_file.xls

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%CurrentFolder%\2012AnnualReport.vbs File name: %CurrentFolder%\2012AnnualReport.vbs
Mime Type: unknown/vbs
Group: Malware file

Additional Information

The following URL's were detected:
download.s1-n.com
The following messages's were detected:
# Message
1Warning! You are going to open a confidential file. Please input the complete file path. ex. C:\path\confidential_file.xls

Loading...