1. /
  2. Security Response/
  3. VBS.SST@mm

VBS.SST@mm - Removal

Risk Level 2: Low

Discovered:
February 12, 2001
Updated:
February 13, 2007 11:46:14 AM
Also Known As:
VBS.Vbswg.gen, Anna Kournikova, VBS/VBSWG.J@mm [F-Prot], VBS_KALAMAR.A [Trend], VBS/SST@MM [McAfee], VBS.OnTheFly [MKS], VBS.VBSWG-based [Kaspersky]
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

Virus definitions dated February 12, 2001, or later will detect this worm. To remove VBS.SST@mm:
  1. Run LiveUpdate to make sure that you have the most recent virus definitions.
  2. Start Norton AntiVirus (NAV), and run a full system scan, making sure that NAV is set to scan all files.
  3. If any files are detected as infected by VBS.SST@mm, click Delete
  4. (Optional -- This is not necessary for the function of your system.) Delete the registry key that was added by the worm.
    CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see the document How to back up the Windows registry before proceeding.
    1. Click Start, and click Run. The Run dialog box appears.
    2. Type regedit and then click OK. The Registry Editor opens.
    3. Navigate to and delete the following key:

      HKEY_CURRENT_USER\Software\OnTheFly
    4. Exit the Registry Editor.


Writeup By: Eric Chien

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver