VBS.VBSWG.gen

VBS.VBSWG.gen is a generic detection for worms created using the worm generator VBSWG (VBS Worm Generator). A recent worm created by this generator is VBS.SST@mm (AnnaKournikova.jpg.vbs). There are currently nine known different versions of VBSWG. Norton Antivirus can detect any worm that uses Microsoft Outlook to propagate itself that can be produced by any of the nine generators. The virus writer that wrote the generators also wrote an encryption program for VBS worms. Norton Antivirus will detect any VBS worm encrypted with this program as VBS.VBSWG.gen.

NOTE: Many of the generated worms will be detected as Bloodhound.VBS.worm



At the time of writing, the argentinian virus writer has removed all generators from his own homepage.

Protection

• Initial Rapid Release version February 12, 2001
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version February 12, 2001
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date February 12, 2001

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: More than 1000
• Number of Sites: More than 10
• Geographical Distribution: Medium
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Medium

Distribution

• Distribution Level: High