high
Summary
Summary
Action- More Information
| Included in our products from | June 2001 (3.46) |
|---|---|
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for disinfecting macro viruses.
Please read the instructions for removing worms.
More Information
VBS/VBSWG-X is an email aware worm based around the VBSWG virus writing kit. It uses Outlook to email itself to each entry in your Outlook address book.
The worm arrives with the following characteristics:
Subject: Homepage
Attached file: homepage.HTML.vbs
Message text:
Hi!
You've got to see this page! It's really cool ;O)
When the worm is executed it saves itself to the file homepage.HTML.vbs in the system temporary directory.
The first time it is run the worm sends itself to everyone in your address book and then sets the registry entry "HKCU\software\An\mailed" to 1 to prevent the email code being run multiple times.
The worm then randomly chooses one of four possible adult-orientated website addresses, and displays it using the default web browser.
To remove the virus infection Sophos recommends users delete all infected files.
|
