VBS/Sling
Analysis
- This virus targets .VBE and .VBS files if the current day is June 16 or July 16 - the virus will append itself to files. Aside of this date-activated file infection payload, the virus may copy itself to all networked drives if run.
- This virus contains this string in its code -
'VBS/Cling by Zed
Recommended Action
- Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option