Updated: February 13, 2007 11:33:39 AM
Also Known As: Lucky2000


Lucky2000 is a very simple overwriting Visual Basic Script virus. The virus was written in Germany. When executed, this virus will simply overwrite all files in the same directory with the virus code.

Antivirus Protection Dates

  • Initial Rapid Release version December 18, 2000
  • Latest Rapid Release version March 09, 2011 revision 038
  • Initial Daily Certified version December 18, 2000
  • Latest Daily Certified version March 09, 2011 revision 039

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Writeup By: Eric Chien

Updated: February 13, 2007 11:33:39 AM
Also Known As: Lucky2000


This virus had never been found in the wild, and it is doubtful it will ever have wide distribution considering its replication mechanism.

The virus will, depending on a random algorithm, display the message:


It will also create the C:\WINDOWS\Favorites\Lucky2000.URL file as a shortcut to a Web site in Russia. This file is then executed so the page is displayed in your Web browser.

Writeup By: Eric Chien