Trojan-PSW.VBS.Half

Once a page containing malicious code has been opened, the Trojan will search directories on the C:\ drive for files with a *.pwl extension. (These files are used in Win9x systems to store user passwords).

It then uses an ActiveXObject

1. Delete the html page containing malicious code.
2. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).

This Trojan steals user passwords. It is a VBScript virus. The file is 977 bytes in size. The Trojan can be found on webpages. It steals passwords from Win9x systems.