1. /
  2. Security Response/
  3. VBS.Gpremier@mm

VBS.Gpremier@mm

Risk Level 1: Very Low

Discovered:
February 6, 2003
Updated:
February 13, 2007 11:48:33 AM
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows NT, Windows XP


VBS.Gpremier@mm is a mass-mailing worm that is written in the Visual Basic Scripting (VBS) language. When it is executed, it copies itself to the \Windows\System folder and infects all the HTML files with the VBS.CandyLove virus.

VBS.Gpremier@mm mails itself to all the contacts in all the Microsoft Outlook Address Books. The email would have the following characteristics:
Subject: NO estimado Bill G.
Attachment: gpremier.vbs

NOTE: Virus definitions dated prior to February 7, 2003 may detect this as Bloodhound.VBS.Worm.

Antivirus Protection Dates

  • Initial Rapid Release version February 7, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version February 7, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date February 12, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: High
Writeup By: Jason Pan

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver