VBS.Ypsan@mm

Printer Friendly Page|Rate this page

Discovered:: November 27, 2002
Updated:: February 13, 2007 11:41:22 AM
Type:: Worm
Systems Affected:: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

VBS.Ypsan@mm is a mass-mailing worm that sends itself to all contacts in the Microsoft Outlook Address Book.

When the worm runs, it adds the value

SENNASPY %system%\SENNASPY.VBS

to the registry key

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

so that the worm runs when you start Windows.

It also creates the value

SENNASPY

in

HKEY_LOCAL_MACHINE

It then sends itself to all contacts in the Microsoft Outlook Address Book. The email message has the following characteristics:

Subject: subject
Message Body: body

Antivirus Protection Dates

Initial Rapid Release version December 2, 2002
Latest Rapid Release version September 28, 2010 revision 054
Initial Daily Certified version December 2, 2002
Latest Daily Certified version September 28, 2010 revision 036
Initial Weekly Certified release date December 4, 2002

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Removal

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16