VBS.Gpremier@mm

VBS.Gpremier@mm is a mass-mailing worm that is written in the Visual Basic Scripting (VBS) language. When it is executed, it copies itself to the \Windows\System folder and infects all the HTML files with the VBS.CandyLove virus.

VBS.Gpremier@mm mails itself to all the contacts in all the Microsoft Outlook Address Books. The email would have the following characteristics:
Subject: NO estimado Bill G.
Attachment: gpremier.vbs

NOTE: Virus definitions dated prior to February 7, 2003 may detect this as Bloodhound.VBS.Worm.

Protection

• Initial Rapid Release version February 7, 2003
• Latest Rapid Release version July 12, 2008 revision 018
• Initial Daily Certified version February 7, 2003
• Latest Daily Certified version July 12, 2008 revision 019
• Initial Weekly Certified release date February 12, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: High