W32/BadBunny is a worm. The worm will infect Windows systems and other platform. The worm spreads through IRC clients.

The worm distributed as an Open Office.org document containing a StarBasic macro. The worm drops malicious script files that affect the functioning of IRC clients like mIRC and X-Chat.

Upon execution, the worm drops as badbunny.js and drop.bad in Root folder. Also script.ini in mirc and mirc32 in Root folder and Program Files folder.

It downloads image file from the following URL:

http://www.gratisweb.com/bad[removed]/badbunny.jpg

The worm attempts a Denial of Service attack by pinging the antivirus websites with ICMP packets.

This worm first appeared on June 11, 2007.

 Other names of W32/BadBunny Worm:

This Worm is also known as StarOffice/BadBunny,SB.Badbunny,SB/BadBunny-A,StarBasic/Bunbad.A,VBS_BADBUN.A.