1. /
  2. Security Response/
  3. VBS.Waterworks.Worm

VBS.Waterworks.Worm

Risk Level 1: Very Low

Discovered:
February 5, 2003
Updated:
February 13, 2007 11:59:51 AM
Also Known As:
VBS/Waterworks.worm [McAfee], VBS_EVION.A [Trend], VBS.Evion [KAV]
Type:
Worm
Systems Affected:
Windows 2000, Windows 3.x, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

VBS.Waterworks.Worm is a Visual Basic Script worm that spreads on all the local and mapped drives. It overwrites .vbs and .html files. VBS.Waterworks.Worm can also spread using mIRC. This worm will display one of 3 messageboxes if the system date is October 15, November 23 or December 25.

The worm was most likely created in Germany.

Antivirus Protection Dates

  • Initial Rapid Release version February 6, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version February 6, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date February 12, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Medium
Writeup By: Jari Kytojoki

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver