VBS.Waterworks.Worm

VBS.Waterworks.Worm is a Visual Basic Script worm that spreads on all the local and mapped drives. It overwrites .vbs and .html files. VBS.Waterworks.Worm can also spread using mIRC. This worm will display one of 3 messageboxes if the system date is October 15, November 23 or December 25.

The worm was most likely created in Germany.

Protection

• Initial Rapid Release version February 6, 2003
• Latest Rapid Release version February 6, 2003
• Initial Daily Certified version February 6, 2003
• Latest Daily Certified version June 17, 2008 revision 017
• Initial Weekly Certified release date February 12, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: Medium