1. /
  2. Security Response/
  3. VBS.Gaggle.B@mm

VBS.Gaggle.B@mm

Risk Level 1: Very Low

Discovered:
December 18, 2002
Updated:
February 13, 2007 11:54:26 AM
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

VBS.Gaggle.B@mm:
  • Is a mass-mailing worm that uses Microsoft Outlook to send itself to all the contacts in the Outlook Address Book
  • Also attempts to spread through mIRC.
  • Appends itself to all the .asp, .hta, .htm, .html, .msconfig, .php, .phtm, .phtml, .plg, .regedb32, .sfc, .shtm, and .shtml files in all the folders of all the drives, except in the root folders.
  • Overwrites all the .vbs files in all the folders of all the drives with itself, except for the .vbs files in the root folders.
  • Deletes the files Msconfig.exe and Regedit.exe.

The email can have various subjects, messages, and attachments.


Antivirus Protection Dates

  • Initial Rapid Release version December 19, 2002
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version December 19, 2002
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date December 24, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver