Lubus.C is a worm that reaches computers via e-mail. The message containing the worm is very easy to identify, as its subject is always TH and the attachment is THWIN.VBS.
Whenever it is run, Lubus.C deletes five random files with the following extensions: XLS, DOC, WAV, DWG, MP3, BAK, WAV, BMP, HTM, HLP, CHM, JPG, GIF, SCR, TTF, MID, CDR, MDB, DBF and ICO.
Lubus.C also drops and runs another worm called Redlof.A.
In addition, Lubus.C overwrites the files with a VBS extension on the floppy disks used on the affected computer. It copies itself to floppy disks under the name UNSCH.DOC.VBS.