1. /
  2. Security Response/
  3. VBS.Melhack.B


Risk Level 1: Very Low

September 13, 2002
February 13, 2007 11:55:40 AM
Also Known As:
VBS_NEDAL.A [Trend], VBS/Amalad.a [McAfee], VBS/Nedal-A [Sophos], VBS.VBSWG.AS [CA], VBS/Nedal [Panda], I-Worm.Melhack [AVP]
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

VBS.Melhack.B is an intended mass mailing worm that is written in Visual Basic. It copies itself as OsamaLaden.vbs into two locations.

The virus contains bugs that keep it from performing most of the intended actions. One such intended action is to send email messages to all contacts in the Microsoft Outlook Address Book.

Antivirus Protection Dates

  • Initial Rapid Release version September 16, 2002
  • Latest Rapid Release version August 20, 2008 revision 017
  • Initial Daily Certified version September 16, 2002
  • Latest Daily Certified version August 20, 2008 revision 016
  • Initial Weekly Certified release date September 18, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment


  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy


  • Damage Level: Low


  • Distribution Level: Low
Writeup By: Douglas Knowles

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver