LHRIC > Technical Services > Virus Alert

	TECHNICAL SERVICES
	home \| search \| contact \| Virus Central
	Providing timely, reliable & cost-effective technical support

Virus Central - Detailed

Virus Information
Name:	VBSWG.X@mm, VBSWG2.D@mm, VBS/SST.gen@mm, VBS/VBSWG-X, VBS.HomePage
Aliases:	HomePage
Type:	Internet Worm
Discovery Date:	May 8, 2001
Detection:	Command AntiVirus version 4.61.2 or higher with definition files dated 05/09/2001 will detect and delete the virus.
Virus Description:	A worm written in Visual Basic that arrives as an email attachment
E-mail Subject:	Homepage
E-mail Body:	Message: You've got to see this pate! It's really cool;0)
Attachment:	Homepage.HTML.vbs

Virus Effects:

When this attachment is double clicked, the worm is executed and will email a copy of itself to every recipient in Outlook's Address Book. VBS/VBSWG.X@mm then deletes all emails in the Inbox and Deleted Items folders that contain the subject "Homepage" in an attempt to hide itself from detection. It also creates the registry key

"HKCU\Software\An\Mailed" that prevents the mass mailing from occurring more than once. Finally, VBS/VBSWG.X@mm will attempt to open one of four pornographic web sites using the system's default browser.

Removal Instructions:

Command AntiVirus version 4.61.2 with definition files dated 05/09/2001 will detect and delete the virus. Note: Command AntiVirus version 4.61.2 without the latest definition files will detect this virus heuristically as an unknown virus.