Alerts May 2001

Computer upgrades, repairs, troubleshooting and consulting services. Products, virus and malware alerts FAQs and VFaqs.

The Computer Guys

Miami to Fort Lauderdale Since 1994 - Thank You!

We Build the Best & Repair the Rest! ©

Top 10 malware reported to Sophos in May 2001

Position

Last
month

Malware

Percentage of reports

New

VBS/VBSWG-X

37.5%

W32/Magistr-A

24.5%

W32/Hybris-B

7.1%

W32/Badtrans-A

6.9%

W32/Apology-B

4.4%

VBS/Kakworm

3.9%

New

VBS/VBSWG-Z

2.1%

Re-entry

WM97/Marker-A

1.5%

W32/Bymer-A

1.0%

W32/Flcss

1.0%

Others

10.1%

This section helps you to understand how it behaves

VBS/VBSWG-X is an email aware worm based around the VBSWG virus writing kit. It uses Outlook to email itself to each entry in your Outlook address book.

The worm arrives with the following characteristics:

Subject: Homepage
Attached file: homepage.HTML.vbs
Message text:

Hi! You've got to see this page! It's really cool ;O)

When the worm is executed it saves itself to the file homepage.HTML.vbs in the system temporary directory.

The first time it is run the worm sends itself to everyone in your address book and then sets the registry entry "HKCU\software\An\mailed" to 1 to prevent the email code being run multiple times.

The worm then randomly chooses one of four possible adult-orientated website addresses, and displays it using the default web browser.

To remove the virus infection Sophos recommends users delete all infected files.

This webpage is optimized for 800 x 600 monitor resolution or above and the latest web browser.