high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for disinfecting macro viruses.
Please read the instructions for removing worms.
More Information
VBS/VBSWG-X is an email aware worm based around the VBSWG virus writing kit. It uses Outlook to email itself to each entry in your Outlook address book.
The worm arrives with the following characteristics:
Subject: Homepage
Attached file: homepage.HTML.vbs
Message text:
Hi!
You've got to see this page! It's really cool ;O)
When the worm is executed it saves itself to the file homepage.HTML.vbs in the system temporary directory.
The first time it is run the worm sends itself to everyone in your address book and then sets the registry entry "HKCU\software\An\mailed" to 1 to prevent the email code being run multiple times.
The worm then randomly chooses one of four possible adult-orientated website addresses, and displays it using the default web browser.
To remove the virus infection Sophos recommends users delete all infected files.
|
