1. /
  2. Security Response/
  3. VBS.Vbswg2.gen

VBS.Vbswg2.gen

Risk Level 1: Very Low

Discovered:
March 13, 2001
Updated:
February 13, 2007 11:51:21 AM
Type:
Worm, Virus

SARC has become aware of a new worm script generation kit. VBS.Vbswg2.gen is a generic detection for worms created using the worm generator Vbswg 2 (VBS Worm Generator 2). As of this time, SARC has not received any samples of worms generated by this kit.

The retail version of Norton AntiVirus 2001 running on a Windows 9X system will already catch worms generated by this program through a feature called script blocking. In order to activate this feature, users running retail NAV 2001 must manually run LiveUpdate to download the latest definitions. This is done by opening up the NAV console and clicking on LiveUpdate.

NOTE: Some of the generated worms will be detected as Bloodhound.VBS.worm



Norton AntiVirus will also detect the current executable version of this worm generator as VBS.Vbswg2.gen.

Antivirus Protection Dates

  • Initial Rapid Release version March 14, 2001
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version March 14, 2001
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Writeup By: Brian Ewell

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver