VBS/VBSWG.AQ@mm

Discussion in 'malware problems & news' started by Technodrome, Jun 6, 2002.

Thread Status:
Not open for further replies.
  1. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    Name: VBS/VBSWG.AQ@mm
    Aliases: Shakira's Pics
    Type: Internet Worm
    Discovery Date: 06 June 2002

    Description:

    VBS/VBSWG.AQ@mm is an encrypted worm written in VBScript. This worm arrives as an email containing the following information:

    Subject: Shakira's Pics
    Message: Hi : i have sent the photos via attachment have funn...
    Attachment: ShakiraPics.jpg.vbs
    When this attachment is double clicked, the worm is executed and it will copy itself to the Windows System directory.

    A message is then displayed with the following text:

    You have been infected by the ShakiraPics Worm
    VBS/VBSWG.AQ@mm will also email a copy of itself to recipients in the Microsoft Outlook address book.

    source: http://www.command.co.uk


    Technodrome
     
  2. Bouch

    Bouch Registered Member

    Joined:
    Apr 14, 2002
    Posts:
    26
    Location:
    Toronto Canada
    Thanks for the info Technodrome. Of course, if one has a firewall that would rename the file because of the vbs extension, or a program like Script Sentry or, better still, Wormguard that would jump on the file because of two file extensions, I suppose that it wouldn't represent that much of a threat. Regards.
     
  3. FanJ

    FanJ Guest

    See also:

    http://www.security-pro.co.uk/yabb/YaBB.pl?board=virusesworms;action=display;num=1023310540
     
  4. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    Simply, you are right Bouch !


    Technodrome
     
  5. Checkout

    Checkout Security Rhinoceros

    Joined:
    Feb 11, 2002
    Posts:
    1,226
    Strange, I've been getting this one for a while but didn't realise it was a nasty - simply because I delete stuff I'm obviously not interested in!  I wonder how many other nasties I've avoided through disinterest in the subject line?   :D
     
  6. Bouch

    Bouch Registered Member

    Joined:
    Apr 14, 2002
    Posts:
    26
    Location:
    Toronto Canada
    Any way to avoid them is a good way. Let's hope that the writers of nasties do not become more imaginative when creating subject lines. Dull and uninteresting works for me.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.