Symantec warns of a computer worm: VBS.VBSWG2.X@mm

Hong Kong -- April 27, 2001

WHAT:
Researchers at the Symantec AntiVirus Research Center (SARC) are issuing a warning about a new worm:VBS.VBSWG2.X@mm.

Due to an increase in the number of submissions, VBS.VBSWG2.X@mm was upgraded today to a Category 4 threat (severe). It is an encrypted VBScript worm that sends itself to all recipients in an infected user's Microsoft Outlook address book.

Infections of the worm have been reported in the Asia Pacific region, includes Hong Kong, Australia and New Zealand.

Anti-virus definitions have been available from Symantec since May 9, 2001

CHARACTERISTICS OF INFECTION:
VBS.VBSWG2.X@mm is an encrypted VBScript worm that sends itself to all recipients in an infected user's Microsoft Outlook address book. The email message has the following characteristics:

Subject: "Homepage"
Body:
Hi!
You've got to see this page! It's really cool ;O)

Attachment: Homepage.HTML.vbs

PAYLOAD:
Once the attachment is opened the worm mails itself to the entire Microsoft Outlook address book. It then tries to open one of four pornographic Web pages

RECOMMENDATIONS/PROTECTION:
Organisations should delete any emails with attachments called VBS.VBSWG2.D@mm or VBS.VBSWG2.X@mm.

SYMANTEC ANTIVIRUS RESEARCH CENTER:
SARC is one of the industry's largest dedicated team of virus experts. With offices located in the United States, Japan, Australia and the Netherlands, the sun never sets on SARC. The centre's mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats and educate the public on safe computing practices. As new computer viruses appear, SARC develops identification and detection for these viruses and provides either a repair or delete operation, thus keeping users protected against the latest virus threats.

SYMANTEC:
Symantec, a world leader in Internet security technology, provides a broad range of content and network security solutions to individuals and companies. The company is a leading provider of virus protection, risk management, Internet content and email filtering, and mobile code detection technologies to enterprise customers. Headquartered in Cupertino, California, Symantec has worldwide operations in more than 36 countries.

NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Centre at http://www.symantec.com/PressCenter/ on Symantec's Web site.

Brands and products referenced herein are the trademarks or registered trademarks of their respective holders. All prices noted are in US dollars and are valid only in the United States.