1. /
  2. Security Response/
  3. VBS.XPJunexp.intd

VBS.XPJunexp.intd

Risk Level 1: Very Low

Discovered:
July 17, 2001
Updated:
February 13, 2007 11:47:52 AM
Also Known As:
VBS.Yang@mm, I-Worm.Yang
Type:
Worm

This worm contains a bug that prohibits it from replicating.

The bug is trivial to fix and for that reason the writeup is aimed at providing information to you about the functionality of this worm when the bug is fixed (Note: NAV will also detect the fixed worm sample).

For this worm to replicate, the operating system must be Windows XP or the Microsoft Outlook 2000 View Control must be installed.

It sends itself out to all recipients in your Microsoft Outlook address book, and overwrite all files that have ht in their extension (such as .htm and .html).

NOTE: Definitions dated prior to July 19, 2001 will detect this worm as VBS.Yang@mm

Antivirus Protection Dates

  • Initial Rapid Release version July 17, 2001
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version July 17, 2001
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Writeup By: Atli Gudmundsson

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver