x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

GaScript.E

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:GaScript.E
Technical name:VBS/GaScript.E
Threat level:Low
Type:Worm
Subtype: Trojan
Effects:  It deletes files, changes the home page of Internet Explorer, modifies the default name of the browser window and opens Notepad one hundred times

Affected platforms:

Windows ME/98/95

Detection updated on:May 14, 2009
StatisticsNo
Country of origin:SPAIN

Brief Description 

    

GaScript.E is a worm that spreads by copying itself to the disks used in an infected computer.

GaScript.E carries out a series of dangerous actions:

  • It deletes all the contents of the My Documents directory.
  • It deletes all the image files with a JPG extension from the Windows directory.
  • It opens the NotePad program one hundred times, which will probably cause the computer to block.

Visible Symptoms 

    

GaScript.E is easy to recognize when it infects a computer, because:

  • The home page of Internet Explorer changes to: http://www.microsoft.com
  • The default name of the browser window changes to: Micrasoft Internet Explorer.

In addition to this, GaScript.E counts the number of times it has been run. When the count reaches 26, GaScript.E takes the following actions:

  • It opens the Notepad program one hundred times, which will probably cause the computer to block.
  • It deletes all the contents of the My Documents directory.
  • It deletes all the image files with a JPG extension from the Windows directory.
  • It displays the following message: